What is GHSA-6xgw-5q2h-p29f?

GHSA-6xgw-5q2h-p29f is a security advisory published by GitHub Security Advisories with Medium severity. Incorrect Behavior Order: Validate Before Canonicalize in the report theme CSS sanitizer in...

Which CVE IDs does GHSA-6xgw-5q2h-p29f cover?

GHSA-6xgw-5q2h-p29f covers the following CVE IDs: CVE-2026-76203. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-6xgw-5q2h-p29fMedium

Incorrect Behavior Order: Validate Before Canonicalize in the report theme CSS sanitizer in...

Vendor

GitHub Security Advisories

Published

August 19, 2026

Last Modified

August 19, 2026

🔗 CVE IDs covered (1)

CVE-2026-76203 →

📋 Description

Incorrect Behavior Order: Validate Before Canonicalize in the report theme CSS sanitizer in maalfer Pentestify 1.2.0 through 2.3.2 allows an authenticated user to force outbound HTTP requests from other users' browsers, disclosing their IP address and User-Agent, via CSS hex escapes that reconstruct the url() function and evade the sanitizer blocklist

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-76203
https://github.com/ccyl13/Pentestify/commit/1ed1aadadb02e959af470aac9958462048f7f5f5
https://secur0.com/en/cna/cve-list/cve-2026-76203-css-sanitizer-bypass-pentestify-report-themes
https://github.com/advisories/GHSA-6xgw-5q2h-p29f