https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-26T23:16:46.419627+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-62489 EUVD-2026-62489 2026-10-26T23:16:46.422281+00:00 EUVD-2026-62489 https://cve.radiocsirt.org/vuln/fkie_cve-2018-6009 fkie_cve-2018-6009 2026-10-26T23:16:46.422321+00:00

In Yii Framework 2.x before 2.0.14, the switchIdentity function in web/User.php did not regenerate the CSRF token upon a change of identity.

 https://cve.radiocsirt.org/vuln/ghsa-cwhm-272p-3wj9 GHSA-cwhm-272p-3wj9 — Yii Framework Cross-Site Request Forgery (CSRF) 2026-10-26T23:16:46.422362+00:00

Affected: Packagist: yiisoft/yii2, Packagist: yiisoft/yii2-dev

In Yii Framework 2.x before 2.0.14, the switchIdentity function in web/User.php did not regenerate the CSRF token upon a change of identity.

 https://cve.radiocsirt.org/vuln/gsd-2018-6009 gsd-2018-6009 2026-10-26T23:16:46.422400+00:00 gsd-2018-6009