CVE-2026-52839
1 advisory.
Packagist/alextselegidis/easyappointments CVE-2026-52839: low 3.3, EPSS 0.23%
Easy!Appointments appointments/store and appointments/update allow cross-provider appointment injection — Authorization Bypass
Action: Upgrade alextselegidis/easyappointments to 1.6.0 or later.
composer require alextselegidis/easyappointments:1.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.0 | - |
Fixed versions
| 1.6.0 |
Sources
- osv: GHSA-w8xc-8g92-v77h
- https://github.com/alextselegidis/easyappointments/security/advisories/GHSA-w8xc-8g92-v77h
- https://nvd.nist.gov/vuln/detail/CVE-2026-52839
- https://github.com/alextselegidis/easyappointments/commit/725eafa647308846ce887657db12771a829e42ef
- https://github.com/alextselegidis/easyappointments
- https://github.com/alextselegidis/easyappointments/releases/tag/1.6.0
CVE-2026-52839 · published · modified · JSON