# Dromara vulnerabilities > Dromara has 5 published vulnerabilities across 5 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Sa-Token, with 2. If you run Dromara software, patch the exploited flaws first. Canonical page: https://www.precursorintelligence.com/vendors/dromara ## At a glance - **Published vulnerabilities:** 5 - **Known to be exploited:** 0 - **Products:** 5 - **Versions:** 105 ## Which Dromara products have the most vulnerabilities? - [Sa-Token](https://www.precursorintelligence.com/product/dromara/sa-token): 2 published vulnerabilities, 31 versions - [Hutool](https://www.precursorintelligence.com/product/dromara/hutool): 1 published vulnerability, 0 versions - [Ruoyi-Vue-Plus](https://www.precursorintelligence.com/product/dromara/ruoyi-vue-plus): 1 published vulnerability, 32 versions - [Sureness](https://www.precursorintelligence.com/product/dromara/sureness): 1 published vulnerability, 24 versions - [Hertzbeat](https://www.precursorintelligence.com/product/dromara/hertzbeat): 0 published vulnerabilities, 18 versions Each product page lists its own known-exploited flaws. ## Which Dromara vulnerabilities are being exploited? None of Dromara's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list. ## Which Dromara flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2025-6925](https://www.precursorintelligence.com/what-is/cve-2025-6925): 1.1%, Medium (CVSS 5.3) - [CVE-2023-44794](https://www.precursorintelligence.com/what-is/cve-2023-44794): 1.0%, Critical (CVSS 9.8) - [CVE-2023-31581](https://www.precursorintelligence.com/what-is/cve-2023-31581): 0.8%, Critical (CVSS 9.8) - [CVE-2023-43961](https://www.precursorintelligence.com/what-is/cve-2023-43961): 0.8%, High (CVSS 8.8) - [CVE-2023-3276](https://www.precursorintelligence.com/what-is/cve-2023-3276): 0.7%, High (CVSS 7.5) ## All Dromara products we track 4 products with at least one tracked version, most vulnerabilities first: - [Sa-Token](https://www.precursorintelligence.com/product/dromara/sa-token): 2 vulnerabilities, 31 versions - [Ruoyi-Vue-Plus](https://www.precursorintelligence.com/product/dromara/ruoyi-vue-plus): 1 vulnerability, 32 versions - [Sureness](https://www.precursorintelligence.com/product/dromara/sureness): 1 vulnerability, 24 versions - [Hertzbeat](https://www.precursorintelligence.com/product/dromara/hertzbeat): 0 vulnerabilities, 18 versions ## Questions ### How many vulnerabilities does Dromara have? Our catalogue lists 5 published vulnerabilities across 5 products and 105 versions from Dromara. ### Which Dromara vulnerabilities are being exploited? None of Dromara's vulnerabilities is on the list of flaws known to be exploited today. ### Which Dromara product has the most vulnerabilities? Sa-Token, with 2 published vulnerabilities. Its own page lists the ones known to be exploited. ### How do I get alerts for new Dromara vulnerabilities? Create a Precursor Intelligence account and track the Dromara products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook. ## Running Dromara? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact