CVE-2026-52770
1 advisory.
Packagist/yeswiki/yeswiki CVE-2026-52770: high 7.5, EPSS 0.47%
YesWiki: SQL Injection possible through public Bazar entry-listing APIs via numeric `query`/`queries` filters
Action: Upgrade yeswiki/yeswiki to 4.6.6 or later.
composer require yeswiki/yeswiki:4.6.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.6.6 | - |
Fixed versions
| 4.6.6 |
Sources
- osv: GHSA-qg78-vmvc-fhjw
- https://github.com/YesWiki/yeswiki/security/advisories/GHSA-qg78-vmvc-fhjw
- https://github.com/YesWiki/yeswiki/commit/f3b0dd093a7ace47dc29a515faeb02635baceae2
- https://github.com/YesWiki/yeswiki
CVE-2026-52770 · published · modified · JSON