RuoYi-Vue-Plus vulnerabilities

CVEs whose affected-version data names the RuoYi-Vue-Plus package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-110106Medium· 4.2PoC

3w ago

RuoYi-Vue-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' social login bindings by supplying their socialId

RuoYi-Vue-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' social login bindings by supplying their socialId. Attackers can send DELETE /auth/unlock/{soc…

▾ Twilightdromara · RuoYi-Vue-PlusEPSS 0.34%via NVD