{"action":"Upgrade phpmyfaq/phpmyfaq to 4.1.5 or later.","affected":[{"fixed":"4.1.5","introduced":"4.1.0"}],"component":"phpmyfaq/phpmyfaq","cve_ids":["CVE-2026-57994"],"ecosystem":"Packagist","epss":0.00358,"exploited":false,"fixed_versions":["4.1.5"],"ghsa_id":"GHSA-mf8r-wm2w-f8c5","id":"tcs_01M5KF5FP6CJJGPF50QVG0Q3Y1","modified_at":"2026-08-26T01:18:31.057381378Z","published_at":"2026-08-25T17:30:23Z","references":["https://osv.dev/vulnerability/GHSA-mf8r-wm2w-f8c5","https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-mf8r-wm2w-f8c5","https://github.com/thorsten/phpMyFAQ/commit/4c7e3f841ba6cb25564c6802509a669b0e328321","https://github.com/thorsten/phpMyFAQ","https://github.com/thorsten/phpMyFAQ/tree/4.1.5"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-mf8r-wm2w-f8c5#Packagist/phpmyfaq/phpmyfaq","url":"https://osv.dev/vulnerability/GHSA-mf8r-wm2w-f8c5"}],"summary":"phpMyFAQ public FAQ APIs expose inactive FAQ content"}