CVE-2026-44262
1 advisory.
Packagist/dedoc/scramble CVE-2026-44262: critical 9.4, EPSS 3.87%
Scramble vulnerable to remote code execution via evaluation of user-controlled input in validation rules
Action: Upgrade dedoc/scramble to 0.13.22 or later.
composer require dedoc/scramble:0.13.22Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.13.2 | 0.13.22 | - |
Fixed versions
| 0.13.22 |
Sources
- osv: GHSA-4rm2-28vj-fj39
- https://github.com/dedoc/scramble/security/advisories/GHSA-4rm2-28vj-fj39
- https://nvd.nist.gov/vuln/detail/CVE-2026-44262
- https://github.com/dedoc/scramble
- https://github.com/dedoc/scramble/releases/tag/v0.13.22
CVE-2026-44262 · published · modified · JSON