dromara

Records66All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical11CVSS 9.0–10.0

CVSS high20CVSS 7.0–8.9

Exploited now

dromara records in CISA KEV

No dromara vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ruoyi-vue-plus 2 records HIGH Sa-token 2 records HIGH Hutool 1 record HIGH Sureness 1 record HIGH

Records

2 records in Ruoyi-vue-plus · all components

TI-2025-41084 CVE-2025-66916 · GHSA-vcqr-rc2q-63p5

The snailjob component in RuoYi-Vue-Plus versions 5.5.1 and earlier, interface…

HIGH 80

The snailjob component in RuoYi-Vue-Plus versions 5.5.1 and earlier, interface /snail-job/workflow/check-node-expression can execute QLExpress expressions, but it does not filter user input, allowing attackers to use the…

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00731 Published 2026-01-08 No fix listed CWE-94

TI-2025-06297 CVE-2025-6925 · GHSA-6m7v-gmwr-qcxx

Dromara RuoYi-Vue-Plus Mail MailController.java path traversal

HIGH 70

A vulnerability has been found in Dromara RuoYi-Vue-Plus 5.4.0 and classified as critical.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01055 Published 2025-06-30 No fix listed CWE-22

Open these records in search →

Critical	11
High	20
Medium	31
Low	4
No CVSS	0