RU
Product
RuoYi-Vue-Plus
6
CVEs
0
On KEV
9.4
Max CVSS
1
New 30D
Severity mix
Critical 2High 0Medium 4Low 0
Watch
Add RuoYi-Vue-Plus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-66916 | 9.4 | Jan 8 | The snailjob component in RuoYi-Vue-Plus versions 5.5.1 and earlier, interface /snail-job/workflow/check-node-expression can execute QLExpress expressions, but it does not filter… Affected: through 5.5.1 |
| CVE-2025-6925 | 9.1 | Jun 30 | Dromara RuoYi-Vue-Plus Mail MailController.java path traversal Affected: 5.4.0 |
| CVE-2026-58176 | 6.5 | Jun 30 | RuoYi-Vue-Plus - Missing Authorization on Workflow Task Management Endpoints Affected: through 5.6.2 |
| CVE-2026-77795 | 6.3 | Aug 21 | Dromara RuoYi-Vue-Plus Workflow Endpoint TestLeaveController improper authorization Affected: 5.6.0; 5.6.1; 5.6.2 |
| CVE-2026-2819 | 6.3 | Feb 20 | Dromara RuoYi-Vue-Plus Workflow deleteByInstanceIds SaServletFilter authorization Affected: 5.5.0; 5.5.1; 5.5.2; 5.5.3 |
| CVE-2026-110106 | 4.2 | Oct 13 | RuoYi-Vue-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId} Affected: through 6.0.0 |
Showing 6