ruoyi-vue-pro vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

RU

Product

ruoyi-vue-pro

by YunaiV · last CVE Oct 25, 2026

13

CVEs

0

On KEV

8.8

Max CVSS

3

New 30D

Vulnerabilities13 In the news0 Timeline

Severity mix

Critical 0High 6Medium 6Low 1

Severity

All severities13 Critical0 High6 Medium6 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add ruoyi-vue-pro to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-97323	6.3	0%	Sep 24	YunaiV/zhijiantianya ruoyi-vue-pro File Upload MpMaterialServiceImpl.java getOriginalFilename path traversal Affected: 2026.08
CVE-2026-97321	6.3	0%	Sep 24	YunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoint GoViewDataServiceImpl.java GoViewDataServiceImpl.getDataBySQL sql injection Affected: 2026.08
CVE-2026-97320	6.3	0%	Sep 24	YunaiV/zhijiantianya ruoyi-vue-pro AI Knowledge AiKnowledgeDocumentServiceImpl.java AiKnowledgeDocumentServiceImpl.readUrl server-side request forgery Affected: 2026.08
CVE-2026-110610	5.4	0%	Oct 14	ruoyi-vue-pro through 2026.09 SSRF via Midjourney referImageUrl and notify imageUrl Affected: through 2026.09
CVE-2026-97325	4.3	0%	Sep 24	YunaiV/zhijiantianya ruoyi-vue-pro OAuth2 Client OAuth2ClientServiceImpl.java validOAuthClientFromCache redirect Affected: 2026.08
CVE-2026-97322	4.3	0%	Sep 24	YunaiV/zhijiantianya ruoyi-vue-pro File Upload FileController.java cross site scripting Affected: 2026.08