Packagist/joedolson/my-calendar CVE-2026-40308: high, EPSS 1.14%
Unauthenticated Information Disclosure (IDOR) via Multisite switch_to_blog in My Calendar
Action: Upgrade joedolson/my-calendar to 3.7.7 or later.
composer require joedolson/my-calendar:3.7.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.7.7 | - |
Fixed versions
| 3.7.7 |
Sources
- osv: GHSA-2mvx-f5qm-v2ch
- https://github.com/joedolson/my-calendar/security/advisories/GHSA-2mvx-f5qm-v2ch
- https://github.com/joedolson/my-calendar
CVE-2026-40308 · published · modified · JSON