CVE-2026-52767
1 advisory.
Packagist/yeswiki/yeswiki CVE-2026-52767: high 8.2
YesWiki Vulnerable to Unauthenticated ActivityPub Signature-Verification Bypass via `!openssl_verify(...)` accepting `int(-1)`
Action: Upgrade yeswiki/yeswiki to 4.6.6 or later.
composer require yeswiki/yeswiki:4.6.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.6.2 | 4.6.6 | - |
Fixed versions
| 4.6.6 |
Sources
- osv: GHSA-mv28-wj57-f57g
- https://github.com/YesWiki/yeswiki/security/advisories/GHSA-mv28-wj57-f57g
- https://github.com/YesWiki/yeswiki/commit/d1795e0301e1a1078f17b4b98f56fff70de2029e
- https://github.com/YesWiki/yeswiki
CVE-2026-52767 · published · modified · JSON