{"action":"Upgrade idno/known to 1.6.3 or later.","affected":[{"fixed":"1.6.3","introduced":"0"}],"component":"idno/known","cve_ids":["CVE-2026-26273"],"ecosystem":"Packagist","epss":0.00972,"exploited":false,"fixed_versions":["1.6.3"],"ghsa_id":"GHSA-78wq-6gcv-w28r","id":"tcs_01M5KEXVQ43RX2BF4JCV28M0X2","modified_at":"2026-02-13T23:11:17.525819Z","published_at":"2026-02-13T22:49:27Z","references":["https://osv.dev/vulnerability/GHSA-78wq-6gcv-w28r","https://github.com/idno/known/security/advisories/GHSA-78wq-6gcv-w28r","https://github.com/idno/known/commit/8439a0747471559fb1ea9f074b929d390f27e66a","https://github.com/idno/known","https://github.com/idno/known/releases/tag/1.6.3"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-78wq-6gcv-w28r","url":"https://osv.dev/vulnerability/GHSA-78wq-6gcv-w28r"}],"summary":"Known affected by Account Takeover via Password Reset Token Leakage"}