Skip to content
OpenAdvisories

Product · pkp

pkp-lib

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-19906

    pkp pkp-lib API Key Generation APIProfileForm.php setData entropy

    A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to …

    pkp pkp-lib