GHSA lookup

GHSA-5VPG-RJ7Q-QPW2

Pruva has a verified reproduction for GHSA-5VPG-RJ7Q-QPW2: Yii2: local file inclusion via View::renderPhpFile extract() of caller-controlled params. The canonical evidence record is REPRO-2026-00156.

REPRO

REPRO-2026-00156

Package

yiisoft/yii2 · composer

Severity

HIGH

Status

published

Open verified reproduction Plain text for agents GitHub advisory