What is GHSA-57jc-x74j-f4w4?

GHSA-57jc-x74j-f4w4 is a security advisory published by GitHub Security Advisories with High severity. Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a...

Which CVE IDs does GHSA-57jc-x74j-f4w4 cover?

GHSA-57jc-x74j-f4w4 covers the following CVE IDs: CVE-2026-4337. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-57jc-x74j-f4w4High

Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a...

Vendor

GitHub Security Advisories

Published

October 27, 2026

Last Modified

October 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-4337 →

📋 Description

Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a unauthenticated user to upload any type of file to the server, and to any path where the web server user has write permissions. This could also allow them to delete files.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-4337
https://www.incibe.es/en/incibe-cert/notices/aviso/unrestricted-upload-file-pumukit-application
https://github.com/advisories/GHSA-57jc-x74j-f4w4