What is GHSA-3g7v-7vpf-gwmm?

GHSA-3g7v-7vpf-gwmm is a security advisory published by GitHub Security Advisories with Critical severity. External Control of File Name or Path in the upload API endpoint of Datiphy Data Management...

Which CVE IDs does GHSA-3g7v-7vpf-gwmm cover?

GHSA-3g7v-7vpf-gwmm covers the following CVE IDs: CVE-2026-76158. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-3g7v-7vpf-gwmmCritical

External Control of File Name or Path in the upload API endpoint of Datiphy Data Management...

Vendor

GitHub Security Advisories

Published

August 21, 2026

Last Modified

August 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-76158 →

📋 Description

External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-76158
https://zuso.ai/advisory
https://github.com/advisories/GHSA-3g7v-7vpf-gwmm