https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T07:57:49.201062+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-16821 cnvd-2020-16821 2026-10-15T07:57:49.203768+00:00 cnvd-2020-16821 https://cve.radiocsirt.org/vuln/euvd-2026-56433 EUVD-2026-56433 2026-10-15T07:57:49.203797+00:00 EUVD-2026-56433 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14537 fkie_cve-2019-14537 2026-10-15T07:57:49.203811+00:00

YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass.

 https://cve.radiocsirt.org/vuln/ghsa-vf23-f26f-mjj9 GHSA-vf23-f26f-mjj9 — Access of Resource Using Incompatible Type ('Type Confusion') in yourls/yourls 2026-10-15T07:57:49.203836+00:00

Affected: Packagist: yourls/yourls

### Impact YOURLS through 1.7.3 is affected by a type juggling vulnerability in the API component that can result in login bypass.

### Patches https://github.com/YOURLS/YOURLS/releases/tag/1.7.4 https://github.com/YOURLS/YOURLS/pull/2542

### References * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14537 * https://github.com/Wocanilo/CVE-2019-14537

### For more information If you have any questions or comments about this advisory: * Open an issue in [YOURLS repository](https://github.com/YOURLS/YOURLS)

 https://cve.radiocsirt.org/vuln/gsd-2019-14537 gsd-2019-14537 2026-10-15T07:57:49.203862+00:00 gsd-2019-14537