Zhijiantianya
6 CVEs tracked since 2025. Since Mar 2025, none of them reached CISA KEV.
Zhijiantianya CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2025-03 | 6 | 0 |
| 2025-04 | 4 or fewer | |
| 2025-05 | 4 or fewer | |
| 2025-06 | 4 or fewer | |
| 2025-07 | 5 or fewer | |
| 2025-08 | 4 or fewer | |
| 2025-09 | 4 or fewer | |
| 2025-10 | 4 or fewer | |
| 2025-11 | 4 or fewer | |
| 2025-12 | 5 or fewer | |
| 2026-01 | 5 or fewer | |
| 2026-02 | 5 or fewer | |
| 2026-03 | 7 or fewer | |
| 2026-04 | 6 or fewer | |
| 2026-05 | 7 or fewer | |
| 2026-06 | 7 or fewer | |
| 2026-07 | 7 or fewer | |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 6 or fewer |
Products
The products that kept showing up in Zhijiantianya's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 13 most recently published vulnerabilities affecting Zhijiantianya.
- CVE-2026-97325YunaiV/zhijiantianya ruoyi-vue-pro OAuth2 Client OAuth2ClientServiceImpl.java validOAuthClientFromCache redirect4.3
- CVE-2026-97324YunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorization7.3
- CVE-2026-97323YunaiV/zhijiantianya ruoyi-vue-pro File Upload MpMaterialServiceImpl.java getOriginalFilename path traversal6.3
- CVE-2026-97322YunaiV/zhijiantianya ruoyi-vue-pro File Upload FileController.java cross site scripting4.3
- CVE-2026-97321YunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoint GoViewDataServiceImpl.java GoViewDataServiceImpl.getDataBySQL sql injection6.3
- CVE-2026-97320YunaiV/zhijiantianya ruoyi-vue-pro AI Knowledge AiKnowledgeDocumentServiceImpl.java AiKnowledgeDocumentServiceImpl.readUrl server-side request forgery6.3
- CVE-2026-13528YunaiV/zhijiantianya ruoyi-vue-pro AppFileController File Upload Endpoint FileServiceImpl.java generateUploadPath path traversal7.3
- CVE-2025-2744zhijiantianya ruoyi-vue-pro Material Upload Interface upload-news-image path traversal5.4
- CVE-2025-2743zhijiantianya ruoyi-vue-pro Material Upload Interface upload-temporary path traversal4.3
- CVE-2025-2742zhijiantianya ruoyi-vue-pro Material Upload Interface upload-permanent path traversal5.4
- CVE-2025-2708zhijiantianya ruoyi-vue-pro Backend File Upload Interface upload path traversal5.4
- CVE-2025-2707zhijiantianya ruoyi-vue-pro Front-End Store Interface upload path traversal5.4
- CVE-2025-2040zhijiantianya ruoyi-vue-pro deploy special elements used in a template engine6.3
The record
- Peak rank
- #160 in Mar 2025
- Busiest month shown
- Mar 2025, 6 CVEs
- Months with a KEV entry
- 0 since Mar 2025
- Monthly snapshots
- 1 since 2025