yangzongzhuan RuoYi-Vue

• CVE-2026-122016 Medium 6.3 yangzongzhuan RuoYi-Vue Permission Service SysPermissionService.java SysPermissionService.getMenuPermission privileges management 0.3%
• CVE-2026-76576 Medium 4.3 yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversal 0.5%
• CVE-2026-9374 Medium 6.3 yangzongzhuan RuoYi-Vue Common Upload Endpoint upload FileUploadUtils.upload unrestricted upload 0.2%
• CVE-2025-4537 Low 3.1 yangzongzhuan RuoYi-Vue Password login.vue sensitive information in a cookie 0.3%