Known Vulnerabilities for products from Dromara
Listed below are 11 of the newest known vulnerabilities associated with the vendor "Dromara".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-121552 json | Not Provided | 2026-11-03 | 2026-11-03 | |
| CVE-2026-120201 json | Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain sup... | Not Provided | 2026-10-31 | 2026-11-09 |
| CVE-2026-111605 json | Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace ... | Not Provided | 2026-10-16 | 2026-11-09 |
| CVE-2026-110609 json | Not Provided | 2026-10-14 | 2026-10-14 | |
| CVE-2026-107781 json | Not Provided | 2026-10-08 | 2026-10-09 | |
| CVE-2026-107780 json | Not Provided | 2026-10-08 | 2026-10-13 | |
| CVE-2026-107779 json | Not Provided | 2026-10-08 | 2026-10-14 | |
| CVE-2026-93961 json | Not Provided | 2026-09-20 | 2026-09-21 | |
| CVE-2026-92993 json | Not Provided | 2026-09-17 | 2026-09-22 | |
| CVE-2026-92992 json | Not Provided | 2026-09-17 | 2026-09-17 | |
| CVE-2026-91993 json | Jpom through 2.11.12 fails to validate workspace ownership when resolving repositoryId on the /build/branch-list endpoint, al... | Not Provided | 2026-09-15 | 2026-11-09 |
| CVE-2026-90510 json | Not Provided | 2026-09-13 | 2026-09-14 | |
| CVE-2026-90509 json | Not Provided | 2026-09-13 | 2026-09-20 | |
| CVE-2025-66916 json | The snailjob component in RuoYi-Vue-Plus versions 5.5.1 and earlier, interface /snail-job/workflow/check-node-expression can ... | Not Provided | 2026-01-08 | 2026-11-04 |
| CVE-2023-51650 json | 7.5 - HIGH | 2023-12-22 | 2024-01-03 | |
| CVE-2023-51387 json | 8.8 - HIGH | 2023-12-22 | 2024-01-03 | |
| CVE-2023-44794 json | An issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to escalate privileges via a crafted payload t... | 9.8 - CRITICAL | 2023-10-25 | 2023-10-31 |
| CVE-2023-43961 json | An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request ma... | 8.8 - HIGH | 2023-10-25 | 2023-11-01 |
| CVE-2023-31581 json | Dromara Sureness before v1.0.8 was discovered to use a hardcoded key. | 9.8 - CRITICAL | 2023-10-25 | 2023-10-31 |
| CVE-2023-3276 json | A vulnerability, which was classified as problematic, has been found in Dromara HuTool up to 5.8.19. Affected by this issue i... | 7.5 - HIGH | 2023-06-15 | 2023-11-07 |