What is GHSA-cc8h-gpwh-gq9r?

GHSA-cc8h-gpwh-gq9r is a security advisory published by GitHub Security Advisories with Medium severity. Reflected XSS in Netron versions \u003c=9.1.2 on desktop application through unsanitized node names...

Which CVE IDs does GHSA-cc8h-gpwh-gq9r cover?

GHSA-cc8h-gpwh-gq9r covers the following CVE IDs: CVE-2026-79720. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-cc8h-gpwh-gq9rMedium

Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names...

Vendor

GitHub Security Advisories

Published

August 27, 2026

Last Modified

August 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-79720 →

📋 Description

Reflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-79720
https://github.com/lutzroeder/netron/commit/cd14bad8c9132b1aaf1d197fe61925575f194f00
https://www.hiddenlayer.com/sai-security-advisory/2026-08-netron
https://github.com/advisories/GHSA-cc8h-gpwh-gq9r