yiisoft/yii vulnerabilities (Packagist)
4 vulnerabilities.
yiisoft/yiiPackagistYii does not prevent XSS in scenarios where fallback error renderer is used6.1 Mediumyiisoft/yiiPackagistUnsafe deserialization of user data in yiisoft/yii8.1 Highyiisoft/yiiPackagistyiisoft/yii before v1.1.27 vulnerable to Remote Code Execution if the application calls `unserialize()` on arbitrary user input8.1 Highyiisoft/yiiPackagistYii PHP Framework arbitrary PHP scripts execution7.5 High