Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-41922
8.1
HIGHCVSS v3
Published
November 23, 2022
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
`yiisoft/yii` before version 1.1.27 are vulnerable to Remote Code Execution (RCE) if the application calls `unserialize()` on arbitrary user input. This has been patched in 1.1.27.
GitHub