YI
Product
yii2
by yiisoft · last CVE May 20, 2026
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 1Low 0
Watch

Add yii2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-2690
9.8
1%
Mar 24
yiisoft Yii2 MockClass.php generate deserialization
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +34 more
CVE-2025-2689
9.8
1%
Mar 24
yiisoft Yii2 SortableIterator.php getIterator deserialization
Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +34 more
CVE-2026-39850
7.4
0%
May 20
Yii 2: Local file inclusion via view parameter name collision
Affected: < 2.0.55
CVE-2024-32877
4.7
0%
May 30
Reflected Cross-site Scripting in yiisoft/yii2 Debug mode
Affected: = 2.0.49.3
Showing 4