CVE-2026-52769
1 advisory.
Packagist/yeswiki/yeswiki CVE-2026-52769: high 8.3, EPSS 0.49%
YesWiki has Unauthenticated Server-Side Request Forgery via ActivityPub `Signature.keyId`
Action: Upgrade yeswiki/yeswiki to 4.6.6 or later.
composer require yeswiki/yeswiki:4.6.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.6.2 | 4.6.6 | - |
Fixed versions
| 4.6.6 |
Sources
- osv: GHSA-vw42-752g-5mrp
- https://github.com/YesWiki/yeswiki/security/advisories/GHSA-vw42-752g-5mrp
- https://github.com/YesWiki/yeswiki
- http://github.com/YesWiki/yeswiki/commit/87e627f33e79879827a3669fee2aa1244612c487
CVE-2026-52769 · published · modified · JSON