Packagist/yourls/yourls CVE-2026-62858: medium 5.3

YOURLS: Unauthenticated File Inclusion

Action: Upgrade yourls/yourls to 1.10.5 or later.

composer require yourls/yourls:1.10.5

Affected

Fixed versions

Sources

• osv: GHSA-f8ff-652m-j5rx
• https://github.com/YOURLS/YOURLS/security/advisories/GHSA-f8ff-652m-j5rx
• https://nvd.nist.gov/vuln/detail/CVE-2026-62858
• https://github.com/YOURLS/YOURLS/pull/4142
• https://github.com/YOURLS/YOURLS/commit/4e85972160a96e03a419a442d5bd8f21f2f02ddb
• https://github.com/YOURLS/YOURLS
• https://github.com/YOURLS/YOURLS/releases/tag/1.10.5

CVE-2026-62858 · published 2026-10-15T20:13:02Z · modified 2026-10-15T20:30:06.075275041Z · JSON