yiisoft/yii2-framework
master@ eb236d6Fixes6
CVEs0
Peak severityHigh
Commits9,193
Regression coverage40.0%
Highlights
Cross-Site Request Forgery: 2 prior fixes. Scrutinize any change in this area.
web/Request.php: most-fixed (2 issues). Treat as high-risk during review.
5 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Cross-Site Request Forgery: 2 historical fix(es) link web/Request.php to Cross-Site Request Forgery.
Authentication Bypass: 1 historical fix(es) link web/User.php to Authentication Bypass.
Path Traversal: 1 historical fix(es) link web/ViewAction.php to Path Traversal.
Last analyzed 30 Sep 2026, 02:55 UTC