{
    "cve": "CVE-2026-65954",
    "vuln_id": "VULN-001706",
    "record": {
        "id": "VULN-001706",
        "schema_version": "v1",
        "preferred_id": "CVE-2026-65954",
        "aliases": [
            "PKSA-KH6K-GS3G-DGR6",
            "CVE-2026-65954"
        ],
        "summary": "Arbitrary code execution",
        "references": [
            {
                "type": "advisory",
                "url": "https://github.com/PHPCSStandards/PHPCSUtils/security/advisories/GHSA-r6hr-vr92-vv28"
            }
        ],
        "severity": [],
        "affected": [
            {
                "package": {
                    "ecosystem": "Packagist",
                    "name": "phpcsstandards/phpcsutils"
                },
                "ranges": [
                    {
                        "type": "ECOSYSTEM",
                        "events": [
                            {
                                "introduced": "1.0.0-alpha1"
                            },
                            {
                                "fixed": "1.2.3"
                            }
                        ]
                    }
                ],
                "database_specific": {
                    "packagist_advisory_id": "PKSA-kh6k-gs3g-dgr6",
                    "packagist_affected_versions": ">=1.0.0-alpha1,<1.2.3"
                }
            }
        ],
        "source": {
            "packagist_ids": [
                "PKSA-KH6K-GS3G-DGR6"
            ],
            "packagist_sources": [
                {
                    "name": "FriendsOfPHP/security-advisories",
                    "remote_id": "phpcsstandards/phpcsutils/CVE-2026-65954.yaml"
                }
            ]
        },
        "flags": [],
        "published": "2026-07-27T09:13:28+00:00"
    }
}