tocsin

CVE-2026-46670

1 advisory.

Packagist/yeswiki/yeswiki CVE-2026-46670: critical 9.8

YesWiki: Unauthenticated SQL Injection

Action: Upgrade yeswiki/yeswiki to 4.6.4 or later.

composer require yeswiki/yeswiki:4.6.4

Affected

introducedfixedlast affected
04.6.4-

Fixed versions

4.6.4

Sources

CVE-2026-46670 · published · modified · JSON