yiisoft/yii2-dev

Yii PHP Framework Version 2 - Development Package

Latest 3.0.0-alpha1

72%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

100

Are you affected? Scan for Free

Vulnerabilities

Title	Versions	Severity
CVE-2025-2689 yiisoft/yii2-dev is vulnerable to Improper Input Validation in versions 0.0.0 - 2.0.45.	0.0.0 - 2.0.45	Medium
CVE-2018-7269 yiisoft/yii2-dev is vulnerable to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in versions 0.0.0 - 2.0.12.1, 2.0.13 - 2.0.13.2 and 2.0.14 - 2.0.15.	0.0.0 - 2.0.15	Critical
CVE-2018-8074 yiisoft/yii2-dev is vulnerable to Improper Control of Generation of Code ('Code Injection') in versions 2.0.0 - 2.0.15.	2.0.0 - 2.0.15	High
CVE-2017-11516 yiisoft/yii2-dev is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 2.0.12 - 2.0.12.	2.0.12 - 2.0.12	Medium
CVE-2021-3689 yiisoft/yii2-dev is vulnerable to Use of Insufficiently Random Values in versions 0.0.0 - 2.0.43.	0.0.0 - 2.0.43	High

Qiang Xue

Alexander Makarov

Maurizio Domba

Carsten Brandt

Timur Ruziev

Paul Klimov

Dmitry Naumenko

Boudewijn Vahrmeijer

Dependency	Last Release	Score
psr/log Version ~1.0.2	—	—
cebe/markdown Version ~1.0.0 \| ~1.1.0	—	—
psr/http-message Version ~1.0.0	—	—
psr/simple-cache Version ~1.0.0	—	—
yiisoft/yii2-composer Version ~2.0.4	—	—