pkg:Packagist/yiisoft/yii2-dev

All known vulnerabilities

• CRITICAL9.8CVE-2018-7269Yii SQL injection vulnerability
  from 0, < 2.0.12.1
• HIGH8.8CVE-2018-6009Yii Framework Cross-Site Request Forgery (CSRF)
  >= 2.0, < 2.0.14
• HIGH8.1CVE-2018-8074Yii Framework Code Injection
  >= 2.0.0, < 2.0.15
• HIGH7.5Use of Insufficiently Random Values in yiisoft/yii2-dev
  from 0, < 2.0.43
• MEDIUM6.3yiisoft Yii2 Deserialization of Untrusted Data
  from 0, <= 2.0.45
• MEDIUM6.1Yii Cross-site Scripting Framework vulnerability
  >= 2.0.12, < 2.0.13
• MEDIUM5.3Use of Cryptographically Weak Pseudo-Random Number Generator in yiisoft/yii2-dev
  from 0, < 2.0.43