Yangzongzhuan
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in any Yangzongzhuan product.
RSS Feeds for Yangzongzhuan security vulnerabilities
Create a CVE RSS feed including security vulnerabilities found in Yangzongzhuan products with stack.watch. Just hit watch, then grab your custom RSS feed url.
Products by Yangzongzhuan Sorted by Most Security Vulnerabilities since 2018
By the Year
In 2026 there have been 2 vulnerabilities in Yangzongzhuan with an average score of 5.8 out of ten. Last year, in 2025 Yangzongzhuan had 1 security vulnerability published. That is, 1 more vulnerability have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.50
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 2 | 5.80 |
| 2025 | 1 | 6.30 |
It may take a day or so for new Yangzongzhuan vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Yangzongzhuan Security Vulnerabilities
| CVE | Date | Vulnerability | Products |
|---|---|---|---|
| CVE-2026-76576 | Aug 19, 2026 |
Path Traversal in RuoYi-Vue Common Download Endpoint (CommonController) <=3.9.2A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. This impacts the function fileDownload/resourceDownload of the file ruoyi-admin/src/main/java/com/ruoyi/web/controller/common/CommonController.java of the component Common Download Endpoint. Performing a manipulation of the argument fileName/resource results in path traversal. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet. |
Ruoyi Vue
|
| CVE-2026-9374 | May 24, 2026 |
RuoYi-Vue <=3.9.2 Unrestricted File Upload via Common Upload EndpointA vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. Impacted is the function FileUploadUtils.upload of the file /common/upload of the component Common Upload Endpoint. Performing a manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The vendor was contacted early about this disclosure but did not respond in any way. |
Ruoyi Vue
|
| CVE-2025-10989 | Sep 26, 2025 |
Remote Improper Auth in RuoYi 4.8.1 via /system/role/authUser/selectAllA security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1. This vulnerability affects unknown code of the file /system/role/authUser/selectAll. Performing manipulation of the argument userIds results in improper authorization. The attack can be initiated remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way. |
Ruoyi
|