Vendor
yiisoft
Public exploit1Avg CVSS7
CVEs in the catalog
14
since 2020-09
Months in the top 100
2
months with a stored rank
Best rank
#75
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| yii2 | 5 | 36% |
| yii | 3 | 21% |
| yiisoft yii2 | 3 | 21% |
| yii2 authclient | 2 | 14% |
| yii2 redis | 1 | 7% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-502 | 5 | 36% |
| CWE-20 | 3 | 21% |
| CWE-1241 | 2 | 14% |
| CWE-79 | 2 | 14% |
| CWE-203 | 1 | 7% |
| CWE-347 | 1 | 7% |
| CWE-470 | 1 | 7% |
| CWE-532 | 1 | 7% |
Latest CVEs
14 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-39850 | CWE-20, CWE-98 | none yet | 7.4 | 2026-05-20 |
| CVE-2025-48493 | CWE-532 | none yet | 5.1 | 2025-06-05 |
| CVE-2025-32027 | CWE-79, CWE-80 | none yet | 6.1 | 2025-04-10 |
| CVE-2025-2690 | CWE-502, CWE-20 | none yet | 6.3 | 2025-03-24 |
| CVE-2025-2689 | CWE-502, CWE-20 | none yet | 6.3 | 2025-03-24 |
| CVE-2024-4990 | CWE-470 | none yet | 8.1 | 2025-03-20 |
| CVE-2024-32877 | CWE-79 | none yet | 4.2 | 2024-05-30 |
| CVE-2023-50714 | CWE-918, CWE-347 | none yet | 6.8 | 2023-12-22 |
| CVE-2023-50708 | CWE-203 | none yet | 6.1 | 2023-12-22 |
| CVE-2023-47130 | CWE-502 | none yet | 8.1 | 2023-11-14 |
| CVE-2022-41922 | CWE-502 | none yet | 8.1 | 2022-11-23 |
| CVE-2021-3692 | CWE-1241 | none yet | 8.1 | 2021-08-10 |
| CVE-2021-3689 | CWE-1241 | none yet | 8.1 | 2021-08-10 |
| CVE-2020-15148 | CWE-502 | 1 | 8.9 | 2020-09-15 |