Yangzongzhuan
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in any Yangzongzhuan product.
RSS Feeds for Yangzongzhuan security vulnerabilities
Create a CVE RSS feed including security vulnerabilities found in Yangzongzhuan products with stack.watch. Just hit watch, then grab your custom RSS feed url.
Products by Yangzongzhuan Sorted by Most Security Vulnerabilities since 2018
By the Year
In 2026 there have been 1 vulnerability in Yangzongzhuan with an average score of 6.3 out of ten. Last year, in 2025 Yangzongzhuan had 1 security vulnerability published. If vulnerabilities keep coming in at the current rate, it appears that number of security vulnerabilities in Yangzongzhuan in 2026 could surpass last years number. Interestingly, the average vulnerability score and the number of vulnerabilities for 2026 and last year was the same.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 6.30 |
| 2025 | 1 | 6.30 |
It may take a day or so for new Yangzongzhuan vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Yangzongzhuan Security Vulnerabilities
| CVE | Date | Vulnerability | Products |
|---|---|---|---|
| CVE-2026-9374 | May 24, 2026 |
RuoYi-Vue <=3.9.2 Unrestricted File Upload via Common Upload EndpointA vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.9.2. Impacted is the function FileUploadUtils.upload of the file /common/upload of the component Common Upload Endpoint. Performing a manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The vendor was contacted early about this disclosure but did not respond in any way. |
Ruoyi Vue
|
| CVE-2025-10989 | Sep 26, 2025 |
Remote Improper Auth in RuoYi 4.8.1 via /system/role/authUser/selectAllA security flaw has been discovered in yangzongzhuan RuoYi up to 4.8.1. This vulnerability affects unknown code of the file /system/role/authUser/selectAll. Performing manipulation of the argument userIds results in improper authorization. The attack can be initiated remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way. |
Ruoyi
|