Y Project vulnerabilities
We track 4 vulnerabilities in Y Project products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on December 18, 2025.
Latest Y Project vulnerabilities
- 8.8 High severity
RuoYi: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security vulnerability has been detected in y_project RuoYi up to 4.8.1. The affected element is an unknown function of the file /monitor/cache/getnames. Such manipulation of the argument fragment leads to code injection. The attack can be executed remotely.
- 7.2 High severity
RuoYi: Deserialization of Untrusted Data
A vulnerability has been found in y_project RuoYi up to 4.8.0 and classified as critical. This vulnerability affects the function getBeanName of the component Whitelist. The manipulation leads to deserialization. The attack can be initiated remotely. The explo
- 7.5 High severity
RuoYi: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in y_project RuoYi up to 4.7.7. It has been classified as problematic. Affected is the function filterKeyword. The manipulation of the argument value leads to resource consumption. VDB-231090 is the identifier assigned to this vulnera
- 9.8 Critical severity
RuoYi: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in y_project RuoYi 4.7.5. This issue affects some unknown processing of the file com/ruoyi/generator/controller/GenController. The manipulation leads to sql injection. The name of the patch is 1