What is GHSA-9jq6-3jwj-jrfh?

GHSA-9jq6-3jwj-jrfh is a security advisory published by GitHub Security Advisories with High severity. When the application executes the JavaScript script embedded in the PDF within the sandbox, it...

Which CVE IDs does GHSA-9jq6-3jwj-jrfh cover?

GHSA-9jq6-3jwj-jrfh covers the following CVE IDs: CVE-2026-12057. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9jq6-3jwj-jrfh?

GHSA-9jq6-3jwj-jrfh has a CVSS v3 base score of 8.6, published by GitHub Security Advisories.

GHSA-9jq6-3jwj-jrfhHighCVSS 8.6

When the application executes the JavaScript script embedded in the PDF within the sandbox, it...

Vendor

GitHub Security Advisories

Published

June 15, 2026

Last Modified

June 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-12057 →

📋 Description

When the application executes the JavaScript script embedded in the PDF within the sandbox, it fails to intercept some dangerous interfaces, which allows remote scripts to be loaded, resulting in arbitrary code execution.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-12057
https://www.foxit.com/support/security-bulletins.html
https://github.com/advisories/GHSA-9jq6-3jwj-jrfh