vulnerability in yeswiki/yeswiki (CVE-2026-52766). Data can be tampered with by attackers. Exploitable via ``POST``. Mitigation: upgrade to `4.6.6` or later.
vulnerability in yeswiki/yeswiki (CVE-2026-52763). Confidential information can be exposed externally. Exploitable via ``recentchanges``. Mitigation: upgrade to `4.6.6` or later.
vulnerability in yeswiki/yeswiki (CVE-2026-52762). Risk of unauthorized operations or information disclosure. Exploitable via `GET /api/forms/2/entries/json-ld`. Mitigation: upgrade to `4.6.6` or later.
vulnerability in avo (CVE-2026-53769). Data can be tampered with by attackers. Exploitable via ``attachment_key``. Mitigation: upgrade to `3.32.0` or later.
command injection in wnx/laravel-backup-restore (CVE-2026-53932). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.9.4` or later.
vulnerability in github.com/forgekeep/nebula-mesh (CVE-2026-53602). Risk of unauthorized operations or information disclosure. Exploitable via ``fingerprintInBlocklist``. Mitigation: upgrade to `0.3.7` or later.