What is GHSA-ph2w-cx28-vhrq?

GHSA-ph2w-cx28-vhrq is a security advisory published by GitHub Security Advisories with High severity. TkEasyGUI Affected by Uncontrolled Search Path Element Issue

Which CVE IDs does GHSA-ph2w-cx28-vhrq cover?

GHSA-ph2w-cx28-vhrq covers the following CVE IDs: CVE-2025-55671. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-ph2w-cx28-vhrq?

GHSA-ph2w-cx28-vhrq has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

Which products are affected by GHSA-ph2w-cx28-vhrq?

GHSA-ph2w-cx28-vhrq affects 1 product, including: pip/TkEasyGUI:\u003c 1.0.22.

GHSA-ph2w-cx28-vhrqHighCVSS 7.8

TkEasyGUI Affected by Uncontrolled Search Path Element Issue

Vendor

GitHub Security Advisories

Published

September 5, 2025

Last Modified

September 5, 2025

🔗 CVE IDs covered (1)

CVE-2025-55671 →

📋 Description

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program.

🎯 Affected products1

pip/TkEasyGUI:< 1.0.22

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-55671
https://github.com/kujirahand/tkeasygui-python/releases/tag/v1.0.22
https://jvn.jp/en/jp/JVN48739895
https://github.com/advisories/GHSA-ph2w-cx28-vhrq