What is GHSA-cvh3-23vq-w7h4?

GHSA-cvh3-23vq-w7h4 is a security advisory published by GitHub Security Advisories with Medium severity. Statamic's Markdown preview endpoint exposes sensitive user data

Which CVE IDs does GHSA-cvh3-23vq-w7h4 cover?

GHSA-cvh3-23vq-w7h4 covers the following CVE IDs: CVE-2026-33882. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-cvh3-23vq-w7h4?

GHSA-cvh3-23vq-w7h4 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

Which products are affected by GHSA-cvh3-23vq-w7h4?

GHSA-cvh3-23vq-w7h4 affects 2 products, including: composer/statamic/cms:\u003c 5.73.16; composer/statamic/cms:\u003e= 6.0.0-alpha.1, \u003c 6.7.2.

GHSA-cvh3-23vq-w7h4MediumCVSS 6.5

Statamic's Markdown preview endpoint exposes sensitive user data

Vendor

GitHub Security Advisories

Published

March 26, 2026

Last Modified

March 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-33882 →

📋 Description

Impact

The markdown preview endpoint could be manipulated to return augmented data from arbitrary fieldtypes. With the users fieldtype specifically, an authenticated control panel user could retrieve sensitive user data including email addresses, encrypted passkey data, and encrypted two-factor authentication codes.

Patches

This has been fixed in 5.73.16 and 6.7.2.

🎯 Affected products2

composer/statamic/cms:< 5.73.16
composer/statamic/cms:>= 6.0.0-alpha.1, < 6.7.2

🔗 References (3)

https://github.com/statamic/cms/security/advisories/GHSA-cvh3-23vq-w7h4
https://nvd.nist.gov/vuln/detail/CVE-2026-33882
https://github.com/advisories/GHSA-cvh3-23vq-w7h4