yiisoft/yii before v1.1.27 vulnerable to Remote Code Execution if the application calls `unserialize()` on arbitrary user input

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

• ghsa-coords

  pkg:composer/yiisoft/yii

  Range: < 1.1.27
• yiisoft/yiiv5

  Range: < 1.1.27

• github.com/advisories/GHSA-442f-wcwq-fpcfghsaADVISORY
• nvd.nist.gov/vuln/detail/CVE-2022-41922ghsaADVISORY
• github.com/yiisoft/yii/commit/ed67b7cc57216557c5c595c6650cdd2d3aa41c52ghsaWEB
• github.com/yiisoft/yii/security/advisories/GHSA-442f-wcwq-fpcfghsaWEB

No linked articles in our index yet.