What is GHSA-vxx9-wqrj-rc4m?

GHSA-vxx9-wqrj-rc4m is a security advisory published by GitHub Security Advisories with High severity. A parsing issue in the handling of directory paths was addressed with improved path validation....

Which CVE IDs does GHSA-vxx9-wqrj-rc4m cover?

GHSA-vxx9-wqrj-rc4m covers the following CVE IDs: CVE-2026-43749. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vxx9-wqrj-rc4m?

GHSA-vxx9-wqrj-rc4m has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

GHSA-vxx9-wqrj-rc4mHighCVSS 7.8

A parsing issue in the handling of directory paths was addressed with improved path validation....

Vendor

GitHub Security Advisories

Published

July 27, 2026

Last Modified

July 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-43749 →

📋 Description

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to gain root privileges.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-43749
https://support.apple.com/en-us/128067
https://support.apple.com/en-us/128071
https://support.apple.com/en-us/128072
https://github.com/advisories/GHSA-vxx9-wqrj-rc4m