Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:20:48 +0000 EUVD-2026-233397 https://cve.radiocsirt.org/vuln/euvd-2026-233397 EUVD-2026-233397 https://cve.radiocsirt.org/vuln/euvd-2026-233397 fkie_cve-2022-41922 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41922 <p>`yiisoft/yii` before version 1.1.27 are vulnerable to Remote Code Execution (RCE) if the application calls `unserialize()` on arbitrary user input. This has been patched in 1.1.27.</p> <p>`yiisoft/yii` before version 1.1.27 are vulnerable to Remote Code Execution (RCE) if the application calls `unserialize()` on arbitrary user input. This has been patched in 1.1.27.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-41922 GHSA-442f-wcwq-fpcf — Prevent RCE when deserializing untrusted user input https://cve.radiocsirt.org/vuln/ghsa-442f-wcwq-fpcf <p><strong>Affected:</strong> Packagist: yiisoft/yii</p> <p>### Impact Affected versions of `yiisoft/yii` are vulnerable to Remote Code Execution (RCE) if the application calls `unserialize()` on arbitrary user input.</p> <p>### Patches Upgrade `yiisoft/yii` to version 1.1.27 or higher.</p> <p>### For more information See the following links for more details: - [Git commit](https://github.com/yiisoft/yii/commit/ed67b7cc57216557c5c595c6650cdd2d3aa41c52) - https://owasp.org/www-community/vulnerabilities/PHP_Object_Injection</p> <p>If you have any questions or comments about this advisory, [contact us through security form](https://www.yiiframework.com/security).</p> <p><strong>Affected:</strong> Packagist: yiisoft/yii</p> <p>### Impact Affected versions of `yiisoft/yii` are vulnerable to Remote Code Execution (RCE) if the application calls `unserialize()` on arbitrary user input.</p> <p>### Patches Upgrade `yiisoft/yii` to version 1.1.27 or higher.</p> <p>### For more information See the following links for more details: - [Git commit](https://github.com/yiisoft/yii/commit/ed67b7cc57216557c5c595c6650cdd2d3aa41c52) - https://owasp.org/www-community/vulnerabilities/PHP_Object_Injection</p> <p>If you have any questions or comments about this advisory, [contact us through security form](https://www.yiiframework.com/security).</p> https://cve.radiocsirt.org/vuln/ghsa-442f-wcwq-fpcf gsd-2022-41922 https://cve.radiocsirt.org/vuln/gsd-2022-41922 gsd-2022-41922 https://cve.radiocsirt.org/vuln/gsd-2022-41922