What is GHSA-g53h-c489-2f5m?

GHSA-g53h-c489-2f5m is a security advisory published by GitHub Security Advisories with High severity. An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the...

Which CVE IDs does GHSA-g53h-c489-2f5m cover?

GHSA-g53h-c489-2f5m covers the following CVE IDs: CVE-2026-94181. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-g53h-c489-2f5m?

GHSA-g53h-c489-2f5m has a CVSS v3 base score of 7.4, published by GitHub Security Advisories.

GHSA-g53h-c489-2f5mHighCVSS 7.4

An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the...

Vendor

GitHub Security Advisories

Published

September 23, 2026

Last Modified

September 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-94181 →

📋 Description

An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a element that triggers requestFullscreen without displaying the fullscreen notification.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-94181
https://hackerone.com/reports/3711701
https://arc.net/security/bulletins#cve-2026-94181-address-bar-spoof-risk-missing-fullscreen-notification-via-select-element
https://github.com/advisories/GHSA-g53h-c489-2f5m