What is GHSA-4j8j-cj78-prcg?

GHSA-4j8j-cj78-prcg is a security advisory published by GitHub Security Advisories with Medium severity. An Improper Neutralization of Special Elements in Output Used by a Downstream Component (...

Which CVE IDs does GHSA-4j8j-cj78-prcg cover?

GHSA-4j8j-cj78-prcg covers the following CVE IDs: CVE-2026-103405. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4j8j-cj78-prcg?

GHSA-4j8j-cj78-prcg has a CVSS v3 base score of 5.8, published by GitHub Security Advisories.

GHSA-4j8j-cj78-prcgMediumCVSS 5.8

An Improper Neutralization of Special Elements in Output Used by a Downstream Component (...

Vendor

GitHub Security Advisories

Published

October 28, 2026

Last Modified

October 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-103405 →

📋 Description

An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the web server in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to inject arbitrary HTTP headers via unsanitized request body parameters.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-103405
https://supportportal.juniper.net/JSA112183
https://github.com/advisories/GHSA-4j8j-cj78-prcg