yiisoft/yii2-dev vulnerabilities
Yii PHP Framework Version 2 - Development Package
- Registry
- Composer
- Latest
- 2.0.55
- License
- BSD-3-Clause
7 known advisories
The latest version, 2.0.55, is not affected by any of them. Projects on older versions may be.
composer require yiisoft/yii2-dev:^2.0.55Security advisories for yiisoft/yii2-dev
yiisoft Yii2 Deserialization of Untrusted Data
- Affected
- <=2.0.45
- Fixed in
- No fix released
Yii SQL injection vulnerability
- Affected
- <2.0.12.1 · >=2.0.13 <2.0.13.2 · >=2.0.14 <2.0.15
- Fixed in
- 2.0.12.1, 2.0.13.2, 2.0.15
Yii Framework Code Injection
- Affected
- >=2.0.0 <2.0.15
- Fixed in
- 2.0.15
Yii Cross-site Scripting Framework vulnerability
- Affected
- >=2.0.12 <2.0.13
- Fixed in
- 2.0.13
Yii Framework Cross-Site Request Forgery (CSRF)
- Affected
- >=2.0 <2.0.14
- Fixed in
- 2.0.14
Use of Insufficiently Random Values in yiisoft/yii2-dev
- Affected
- <2.0.43
- Fixed in
- 2.0.43
Use of Cryptographically Weak Pseudo-Random Number Generator in yiisoft/yii2-dev
- Affected
- <2.0.43
- Fixed in
- 2.0.43
Which of your client projects still run an old yiisoft/yii2-dev?
NPMscan reads the composer.lock in every GitHub repo you pick and checks each installed version against these advisories, including the packages your packages pull in. Each finding comes with the command that fixes it.
Other Composer packages
Advisory data from OSV.dev (opens OSV.dev in a new tab), refreshed daily. Package details from the Composer registry.