RU
Product
RuoYi-Vue-Plus
by dromara · last CVE Oct 13, 2026
6
CVEs
0
On KEV
9.4
Max CVSS
1
New 30D
Severity mix
Critical 2High 0Medium 4Low 0
Watch

Add RuoYi-Vue-Plus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-66916
9.4
1%
Jan 8
The snailjob component in RuoYi-Vue-Plus versions 5.5.1 and earlier, interface /snail-job/workflow/check-node-expression can execute QLExpress expressions, but it does not filter…
Affected: through 5.5.1
CVE-2025-6925
9.1
1%
Jun 30
Dromara RuoYi-Vue-Plus Mail MailController.java path traversal
Affected: 5.4.0
Showing 2