What is GHSA-7983-35fr-8qwm?

GHSA-7983-35fr-8qwm is a security advisory published by GitHub Security Advisories with Medium severity. Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar...

Which CVE IDs does GHSA-7983-35fr-8qwm cover?

GHSA-7983-35fr-8qwm covers the following CVE IDs: CVE-2026-65650. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7983-35fr-8qwm?

GHSA-7983-35fr-8qwm has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

GHSA-7983-35fr-8qwmMediumCVSS 4.3

Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar...

Vendor

GitHub Security Advisories

Published

July 22, 2026

Last Modified

July 22, 2026

🔗 CVE IDs covered (1)

CVE-2026-65650 →

📋 Description

Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-65650
https://github.com/Elgg/Elgg/pull/15041
https://github.com/Elgg/Elgg/commit/ab91d59dc2caaa3fdbfe7e9b916fc0cc7e6b323a
https://github.com/Elgg/Elgg/compare/7.0.0-rc.1...7.0.0
https://github.com/advisories/GHSA-7983-35fr-8qwm