Packagist/alextselegidis/easyappointments CVE-2026-52837: medium 6.9, EPSS 0.46%

Easy!Appointments has unauthenticated customer PII disclosure on booking reschedule page

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-xgr6-pqjv-3pf8
• nvd: CVE-2026-52837
• https://github.com/alextselegidis/easyappointments/security/advisories/GHSA-xgr6-pqjv-3pf8
• https://github.com/alextselegidis/easyappointments/commit/40bb0b31b531540bc9006efce4220eb0a437ed2b
• https://github.com/alextselegidis/easyappointments
• https://github.com/alextselegidis/easyappointments/releases/tag/1.6.0

CVE-2026-52837 · published 2026-07-29T16:28:23Z · modified 2026-07-29T16:45:35.488458348Z · JSON