CVE-2026-52778
1 advisory.
Packagist/yeswiki/yeswiki CVE-2026-52778: critical 9.8, EPSS 0.80%
YesWiki has Unsafe eval() in its Formula Calculato, Leading to Remote Code Execution & Denial of Service
Action: Upgrade yeswiki/yeswiki to 4.6.6 or later.
composer require yeswiki/yeswiki:4.6.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.6.6 | - |
Fixed versions
| 4.6.6 |
Sources
- osv: GHSA-px5m-h76g-p7p8
- https://github.com/YesWiki/yeswiki/security/advisories/GHSA-px5m-h76g-p7p8
- https://nvd.nist.gov/vuln/detail/CVE-2026-52778
- https://github.com/YesWiki/yeswiki/commit/dd2bd8fb099de0d21504bda8a810693b3fcb8e52
- https://github.com/YesWiki/yeswiki
- https://github.com/YesWiki/yeswiki/releases/tag/v4.6.6
CVE-2026-52778 · published · modified · JSON