Repository Issue Activity (beta)

#1 请在 https://gitee.com/y_project/RuoYi 里提问

#334 `Instance.hashCode() and toString() throw IllegalStateException for an instance created by Instance.create()`

#331 Idle connections evicted from Druid pool do not close underlying MySQL physical connections; orphan physical connections persist after app shutdown

#330 Stored XSS in Admin Menu Tab Rendering via Unsafe Menu Name Reparse

#329 Stored XSS in Admin Notice Dropdown via Unsafe Notice Title HTML Insertion

#328 角色数据范围/用户分配越权：authDataScope 与 authUser 缺少 data scope 校验（CVE-2026-37669）

#322 OnlineSessionFactory存在不安全反序列化漏洞（可导致RCE）

#321 CSRF防护默认关闭导致所有POST接口无防护

#320 通知公告模块存储型XSS漏洞

#319 有沒有openclaw的skill

#318 JobInvokeUtil 疑似存在不安全反射调用导致的远程代码执行漏洞 (CWE-470/CWE-502)

#308 A stored XSS vulnerability exists in the /system/menu/edit endpoint

#317 关于java版本，为啥这个是java17，微服务的版本是java8，这是有什么考量吗？

#311 Unauthorized Force Logout via Online Session Monitor

#310 SQL注入 system/user/list 接口

#307 有没有微前端的版本？

#303 你们好像有一个地方忘了开启事务管理

#300 SQL injection vulnerability

#298 Stored Cross-Site Scripting (XSS) Vulnerability in /system/notice/edit Endpoint

#297 Druid credentials hardcoded vulnerability

#296 Unrestricted Upload of File with Dangerous Type which lead to Stored XSS (CWE-434)

#295 Frame Injection Vulnerability

#294 Stored XSS vulnerability

#293 IDOR vulnerability lead to DOM XSS

#292 RuoYi System Unauthorized Task Status Modification And Run Vulnerability Report