{"action":"Upgrade yeswiki/yeswiki to 4.6.6 or later.","affected":[{"fixed":"4.6.6","introduced":"4.6.2"}],"component":"yeswiki/yeswiki","cve_ids":["CVE-2026-52767"],"ecosystem":"Packagist","epss":0.00352,"exploited":false,"fixed_versions":["4.6.6"],"ghsa_id":"GHSA-mv28-wj57-f57g","id":"tcs_01M5KF5VC8K4BYBSHG5SWGKQ1E","modified_at":"2026-07-09T21:11:38.965863Z","published_at":"2026-07-09T20:58:12Z","references":["https://osv.dev/vulnerability/GHSA-mv28-wj57-f57g","https://github.com/YesWiki/yeswiki/security/advisories/GHSA-mv28-wj57-f57g","https://github.com/YesWiki/yeswiki/commit/d1795e0301e1a1078f17b4b98f56fff70de2029e","https://github.com/YesWiki/yeswiki"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-mv28-wj57-f57g","url":"https://osv.dev/vulnerability/GHSA-mv28-wj57-f57g"}],"summary":"YesWiki Vulnerable to Unauthenticated ActivityPub Signature-Verification Bypass via `!openssl_verify(...)` accepting `int(-1)`"}