Packagist/yeswiki/yeswiki CVE-2026-52777: critical, EPSS 0.28%

YesWiki Vulnerable to Authenticated PHP Object Injection in BazarImportAction via unserialize

Action: Upgrade yeswiki/yeswiki to 4.6.6 or later.

composer require yeswiki/yeswiki:4.6.6

Affected

Fixed versions

Sources

• osv: GHSA-9369-69wj-7m2f
• https://github.com/YesWiki/yeswiki/security/advisories/GHSA-9369-69wj-7m2f
• https://github.com/YesWiki/yeswiki/commit/8f70a8d6b8befa0e644d03c785701dbbc55b8fd0
• https://github.com/YesWiki/yeswiki

CVE-2026-52777 · published 2026-07-09T21:02:58Z · modified 2026-07-09T21:26:41.935923Z · JSON