Search results

Idle connections evicted from Druid pool do not close underlying MySQL physical connections; orphan physical connections persist after app shutdown

Status: Open.

#331 In yangzongzhuan/RuoYi;

· jutbin opened on Jul 7, 2026

Stored XSS in Admin Menu Tab Rendering via Unsafe Menu Name Reparse

Status: Open.

#330 In yangzongzhuan/RuoYi;

· cyuanb opened on Jul 3, 2026

Stored XSS in Admin Notice Dropdown via Unsafe Notice Title HTML Insertion

Status: Open.

#329 In yangzongzhuan/RuoYi;

· cyuanb opened on Jul 3, 2026

角色数据范围/用户分配越权：authDataScope 与 authUser 缺少 data scope 校验（CVE-2026-37669）

Status: Open.

#328 In yangzongzhuan/RuoYi;

· Archer-GJH opened on Jun 28, 2026

OnlineSessionFactory存在不安全反序列化漏洞（可导致RCE）

Status: Open.

#322 In yangzongzhuan/RuoYi;

· pegasus-l opened on Apr 20, 2026

CSRF防护默认关闭导致所有POST接口无防护

Status: Open.

#321 In yangzongzhuan/RuoYi;

· pegasus-l opened on Apr 20, 2026

通知公告模块存储型XSS漏洞

Status: Open.

#320 In yangzongzhuan/RuoYi;

· pegasus-l opened on Apr 20, 2026

有沒有openclaw的skill

Status: Open.

#319 In yangzongzhuan/RuoYi;

· dxking100 opened on Mar 16, 2026

请在 https://gitee.com/y_project/RuoYi 里提问

questionFurther information is requestedFurther information is requested

Status: Open.

#1 In yangzongzhuan/RuoYi;

· yangzongzhuan opened on Oct 18, 2019