What is GHSA-p8p4-668f-3c4x?

GHSA-p8p4-668f-3c4x is a security advisory published by GitHub Security Advisories with High severity. Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')...

Which CVE IDs does GHSA-p8p4-668f-3c4x cover?

GHSA-p8p4-668f-3c4x covers the following CVE IDs: CVE-2026-3457. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-p8p4-668f-3c4x?

GHSA-p8p4-668f-3c4x has a CVSS v3 base score of 6.8, published by GitHub Security Advisories.

GHSA-p8p4-668f-3c4xHighCVSS 6.8

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')...

Vendor

GitHub Security Advisories

Published

March 27, 2026

Last Modified

August 26, 2026

🔗 CVE IDs covered (1)

CVE-2026-3457 →

📋 Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS.This issue affects Sentinel LDK Runtime: before 10.22.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-3457
https://supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_id=5c18186b478aa950128dca72e36d4391&sysparm_article=KB0027106
https://github.com/advisories/GHSA-p8p4-668f-3c4x