https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:05:25 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-158605 EUVD-2026-158605 https://cve.radiocsirt.org/vuln/euvd-2026-158605 https://cve.radiocsirt.org/vuln/fkie_cve-2023-47130 <p>Yii is an open source PHP web framework. yiisoft/yii before version 1.1.29 are vulnerable to Remote Code Execution (RCE) if the application calls `unserialize()` on arbitrary user input. An attacker may leverage this vulnerability to compromise the host system. A fix has been developed for the 1.1.29 release. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p>Yii is an open source PHP web framework. yiisoft/yii before version 1.1.29 are vulnerable to Remote Code Execution (RCE) if the application calls `unserialize()` on arbitrary user input. An attacker may leverage this vulnerability to compromise the host system. A fix has been developed for the 1.1.29 release. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-47130 https://cve.radiocsirt.org/vuln/ghsa-mw2w-2hj2-fg8q <p><strong>Affected:</strong> Packagist: yiisoft/yii</p> <p>### Impact Affected versions of `yiisoft/yii` are vulnerable to Remote Code Execution (RCE) if the application calls `unserialize()` on arbitrary user input.</p> <p>### Patches Upgrade `yiisoft/yii` to version 1.1.29 or higher.</p> <p>### For more information See the following links for more details: - [Git commit](https://github.com/yiisoft/yii/commit/37142be4dc5831114a375392e86d6450d4951c06) - https://owasp.org/www-community/vulnerabilities/PHP_Object_Injection</p> <p>If you have any questions or comments about this advisory, [contact us through security form](https://www.yiiframework.com/security).</p> <p><strong>Affected:</strong> Packagist: yiisoft/yii</p> <p>### Impact Affected versions of `yiisoft/yii` are vulnerable to Remote Code Execution (RCE) if the application calls `unserialize()` on arbitrary user input.</p> <p>### Patches Upgrade `yiisoft/yii` to version 1.1.29 or higher.</p> <p>### For more information See the following links for more details: - [Git commit](https://github.com/yiisoft/yii/commit/37142be4dc5831114a375392e86d6450d4951c06) - https://owasp.org/www-community/vulnerabilities/PHP_Object_Injection</p> <p>If you have any questions or comments about this advisory, [contact us through security form](https://www.yiiframework.com/security).</p> https://cve.radiocsirt.org/vuln/ghsa-mw2w-2hj2-fg8q https://cve.radiocsirt.org/vuln/gsd-2023-47130 gsd-2023-47130 https://cve.radiocsirt.org/vuln/gsd-2023-47130