What is GHSA-vp5g-xhpv-4wq4?

GHSA-vp5g-xhpv-4wq4 is a security advisory published by GitHub Security Advisories with Low severity. Exposure of sensitive information through data queries vulnerability in The Wikimedia Foundation...

Which CVE IDs does GHSA-vp5g-xhpv-4wq4 cover?

GHSA-vp5g-xhpv-4wq4 covers the following CVE IDs: CVE-2026-103440. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-vp5g-xhpv-4wq4Low

Exposure of sensitive information through data queries vulnerability in The Wikimedia Foundation...

Vendor

GitHub Security Advisories

Published

September 30, 2026

Last Modified

September 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-103440 →

📋 Description

Exposure of sensitive information through data queries vulnerability in The Wikimedia Foundation MediaWiki PageTriage extension allows Information Elicitation.

This issue affects MediaWiki PageTriage extension: 1.46, 1.45, and 1.43.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-103440
https://gerrit.wikimedia.org/r/q/I4bdd5f5be95ed5d02c504784fb31da4e5de59da6
https://phabricator.wikimedia.org/T435623
https://github.com/advisories/GHSA-vp5g-xhpv-4wq4