yiisoft Yii2

• CVE-2026-39850 High 7.4 Yii 2: Local file inclusion via view parameter name collision 0.5%
• CVE-2025-2690 Medium 6.3 yiisoft Yii2 MockClass.php generate deserialization 0.7%
• CVE-2025-2689 Medium 6.3 yiisoft Yii2 SortableIterator.php getIterator deserialization 0.6%
• CVE-2024-32877 Medium 4.2 Reflected Cross-site Scripting in yiisoft/yii2 Debug mode 0.3%
• CVE-2020-15148 High 8.9 Unsafe deserialization in Yii 2 77.5%