| CVE-2026-119647 |
RuoYi-Vue-Plus through 6.0.0 Data-Scope Bypass via /system/user/list/dept/{deptId}
|
5.3
Medium
|
Oct 30, 2026 |
| CVE-2026-110106 |
RuoYi-Vue-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated…
|
2.3
Low
|
Oct 13, 2026 |
| CVE-2026-77795 |
A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2
|
5.3
Medium
|
Aug 21, 2026 |
| CVE-2026-58176 |
RuoYi-Vue-Plus through 5.6.2, fixed in commit 88d03d9, exposes workflow task management endpoints under /workflow/task…
|
6.5
Medium
|
Jun 30, 2026 |
| CVE-2026-2819 |
A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.5.3
|
5.3
Medium
|
Feb 20, 2026 |
| CVE-2025-6925 |
A vulnerability has been found in Dromara RuoYi-Vue-Plus 5.4.0 and classified as critical
|
6.9
Medium
|
Jun 30, 2025 |