CVE-2026-26273
1 advisory.
Packagist/idno/known CVE-2026-26273: critical 9.8
Known affected by Account Takeover via Password Reset Token Leakage
Action: Upgrade idno/known to 1.6.3 or later.
composer require idno/known:1.6.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.3 | - |
Fixed versions
| 1.6.3 |
Sources
- osv: GHSA-78wq-6gcv-w28r
- https://github.com/idno/known/security/advisories/GHSA-78wq-6gcv-w28r
- https://github.com/idno/known/commit/8439a0747471559fb1ea9f074b929d390f27e66a
- https://github.com/idno/known
- https://github.com/idno/known/releases/tag/1.6.3
CVE-2026-26273 · published · modified · JSON