CVE-2026-19906

A weakness has been identified in pkp pkp-lib 3.3.0/3.4.0/3.5.0. This vulnerability affects the function setData of the file classes/user/form/APIProfileForm.php of the component API Key Generation. Executing a manipulation of the argument apiKey can lead to insufficient entropy. The attack may b...

PT-2026-73047

Name of the Vulnerable Software and Affected Versions pkp pkp-lib versions 3.3.0 through 3.5.0 Description A weakness exists in the API Key Generation component within the setData function of the classes/user/form/APIProfileForm.php file. A remote attacker can manipulate the apiKey argument to...