{"action":"Upgrade thorsten/phpmyfaq to 4.1.5 or later.","affected":[{"fixed":"4.1.5","introduced":"4.0.0-alpha"}],"component":"thorsten/phpmyfaq","cve_ids":["CVE-2026-57961"],"ecosystem":"Packagist","epss":0.00399,"exploited":false,"fixed_versions":["4.1.5"],"ghsa_id":"GHSA-88g4-74f3-63x9","id":"tcs_01M5KEYTMNK2X676HD1TMZQQKJ","modified_at":"2026-08-26T01:18:31.011690215Z","published_at":"2026-08-25T17:28:56Z","references":["https://osv.dev/vulnerability/GHSA-88g4-74f3-63x9","https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-88g4-74f3-63x9","https://github.com/thorsten/phpMyFAQ/commit/91ce64405479933d7d62c751fa79c2f5c6fda591","https://github.com/thorsten/phpMyFAQ/commit/b709ebe69405385785c2a74ae940c3e8d4cd0a8b","https://github.com/thorsten/phpMyFAQ"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-88g4-74f3-63x9","url":"https://osv.dev/vulnerability/GHSA-88g4-74f3-63x9"}],"summary":"phpMyFAQ has Potential Authenticated Path Traversal in PDF Export"}