Security

Report a vulnerability

.github/SECURITY.md

Security Policy

Please use the security issue form to report to us any security issue you find in Yii. DO NOT use the issue tracker or discuss it in the public forum as it will cause more damage than help.

Please note that as a non-commercial OpenSource project we are not able to pay bounties at the moment.

Unsafe Reflection in base Component class in yiisoft/yii2
GHSA-cjcc-p67m-7qxm published May 30, 2024 by samdark

High
Reflected XSS in Debug mode
GHSA-qg5r-95m4-mjgj published May 30, 2024 by samdark

Moderate
Unsafe unserialization
GHSA-699q-wcff-g9mj published Sep 14, 2020 by samdark

High

Learn more about advisories related to yiisoft/yii2 in the GitHub Advisory Database