en
Dromara is a community-based open-source organization founded by project maintainers in China. It coordinates and supports open-source software across distributed systems, microservices, authentication, monitoring, logging, scheduling, and developer tooling, with a global user and contributor community.
As of 10/23/2026, dromara recorded 29 security vulnerabilities in the last 90 days across 9 products, including 15 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, lamp-cloud had the most security vulnerabilities in the dromara ecosystem, with 12 vulnerabilities—approximately 41.38% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-111605Jpom through 2.11.12 Cross-Workspace Authorization Bypass via SshFileControllerCVE-2026-110609Dromara Skyeye through commit 65d3ddcede70 SQL Injection via keyword ParameterCVE-2026-110107RuoYi-Cloud-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId}CVE-2026-110106RuoYi-Vue-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId}CVE-2026-109168lamp-cloud through 5.10.1 IDOR via /anyone/appendix/listFileByBizId63 Results | Page 1 of 7
| SeverityHigh |
| SeverityLow |
| SeverityLow |
| SeverityHigh |
| SeverityHigh |
| SeverityCritical |
| SeverityCritical |
| SeverityCritical |
| SeverityMedium |