Executive brief
yiisoft Yii2 Deserialization of Untrusted Data
Affected products
- Packagist yiisoft/yii2-dev
Junglewise Threat Intelligence
CVE-2025-2689: yiisoft Yii2 Deserialization of Untrusted Data
CVE-2025-2689 · Severity: low · CVSS 3.1 · Published 2025-03-24
Technologies: yiisoft/yii2-dev (Packagist). Vendors: Packagist.