<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: yunaiv-ruoyi-vue-pro</title><description>Every new CVE for yunaiv-ruoyi-vue-pro.</description><link>https://agentprime.io/</link><item><title>CVE-2026-116007: YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification SmsCodeServiceImpl.java SmsCodeServiceImpl.validateSmsCode0 excessive authentication</title><link>https://agentprime.io/advisories/CVE-2026-116007/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-116007/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 25 Oct 2026 03:45:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-116006: YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification AuthController.java improper authentication</title><link>https://agentprime.io/advisories/CVE-2026-116006/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-116006/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 25 Oct 2026 03:30:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-110610: ruoyi-vue-pro through 2026.09 SSRF via Midjourney referImageUrl and notify imageUrl</title><link>https://agentprime.io/advisories/CVE-2026-110610/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110610/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Oct 2026 14:16:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-97325: YunaiV/zhijiantianya ruoyi-vue-pro OAuth2 Client OAuth2ClientServiceImpl.java validOAuthClientFromCache redirect</title><link>https://agentprime.io/advisories/CVE-2026-97325/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-97325/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 24 Sep 2026 19:30:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-97324: YunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorization</title><link>https://agentprime.io/advisories/CVE-2026-97324/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-97324/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 24 Sep 2026 19:15:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-97323: YunaiV/zhijiantianya ruoyi-vue-pro File Upload MpMaterialServiceImpl.java getOriginalFilename path traversal</title><link>https://agentprime.io/advisories/CVE-2026-97323/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-97323/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 24 Sep 2026 19:00:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-97322: YunaiV/zhijiantianya ruoyi-vue-pro File Upload FileController.java cross site scripting</title><link>https://agentprime.io/advisories/CVE-2026-97322/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-97322/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 24 Sep 2026 18:45:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-97321: YunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoint GoViewDataServiceImpl.java GoViewDataServiceImpl.getDataBySQL sql injection</title><link>https://agentprime.io/advisories/CVE-2026-97321/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-97321/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 24 Sep 2026 18:30:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-97320: YunaiV/zhijiantianya ruoyi-vue-pro AI Knowledge AiKnowledgeDocumentServiceImpl.java AiKnowledgeDocumentServiceImpl.readUrl server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2026-97320/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-97320/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 24 Sep 2026 18:15:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-13528: YunaiV/zhijiantianya ruoyi-vue-pro AppFileController File Upload Endpoint FileServiceImpl.java generateUploadPath path traversal</title><link>https://agentprime.io/advisories/CVE-2026-13528/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-13528/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 29 Jun 2026 02:45:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-10988: YunaiV ruoyi-vue-pro transfer improper authorization</title><link>https://agentprime.io/advisories/CVE-2025-10988/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-10988/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 26 Sep 2025 00:32:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-10278: YunaiV ruoyi-vue-pro transfer improper authorization</title><link>https://agentprime.io/advisories/CVE-2025-10278/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-10278/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Sep 2025 03:32:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-10276: YunaiV ruoyi-vue-pro transfer improper authorization</title><link>https://agentprime.io/advisories/CVE-2025-10276/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-10276/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Sep 2025 02:02:06 GMT</pubDate><category>CVE</category></item></channel></rss>