Yangzongzhuan
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in any Yangzongzhuan product.
RSS Feeds for Yangzongzhuan security vulnerabilities
Create a CVE RSS feed including security vulnerabilities found in Yangzongzhuan products with stack.watch. Just hit watch, then grab your custom RSS feed url.
Products by Yangzongzhuan Sorted by Most Security Vulnerabilities since 2018
By the Year
In 2026 there have been 1 vulnerability in Yangzongzhuan with an average score of 6.3 out of ten. Last year, in 2025 Yangzongzhuan had 1 security vulnerability published. At the current rates, it appears that the number of vulnerabilities last year and this year may equal out. Interestingly, the average vulnerability score and the number of vulnerabilities for 2026 and last year was the same.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 6.30 |
| 2025 | 1 | 6.30 |
It may take a day or so for new Yangzongzhuan vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Yangzongzhuan Security Vulnerabilities
| CVE | Date | Vulnerability | Products |
|---|---|---|---|
| CVE-2026-9374 | May 24, 2026 |
RuoYi-Vue <=3.9.2 Unrestricted File Upload via Common Upload EndpointA vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. Impacted is the function FileUploadUtils.upload of the file /common/upload of the component Common Upload Endpoint. Performing a manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The vendor was contacted early about this disclosure but did not respond in any way. |
Ruoyi Vue
|
| CVE-2025-10989 | Sep 26, 2025 |
Remote Improper Auth in RuoYi 4.8.1 via /system/role/authUser/selectAllA security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1. This vulnerability affects unknown code of the file /system/role/authUser/selectAll. Performing manipulation of the argument userIds results in improper authorization. The attack can be initiated remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way. |
Ruoyi
|