What is GHSA-chm9-7crh-67fc?

GHSA-chm9-7crh-67fc is a security advisory published by GitHub Security Advisories with High severity. Use of GET request method with sensitive query strings vulnerability in Bilin Software and...

Which CVE IDs does GHSA-chm9-7crh-67fc cover?

GHSA-chm9-7crh-67fc covers the following CVE IDs: CVE-2026-14838. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-chm9-7crh-67fc?

GHSA-chm9-7crh-67fc has a CVSS v3 base score of 7.4, published by GitHub Security Advisories.

GHSA-chm9-7crh-67fcHighCVSS 7.4

Use of GET request method with sensitive query strings vulnerability in Bilin Software and...

Vendor

GitHub Security Advisories

Published

August 4, 2026

Last Modified

August 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-14838 →

📋 Description

Use of GET request method with sensitive query strings vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Session Hijacking.

This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-14838
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0737
https://github.com/advisories/GHSA-chm9-7crh-67fc