What is GHSA-w8cj-56rx-3gpm?

GHSA-w8cj-56rx-3gpm is a security advisory published by GitHub Security Advisories with Medium severity. The system stores the username and password from the login form after submitting the request....

Which CVE IDs does GHSA-w8cj-56rx-3gpm cover?

GHSA-w8cj-56rx-3gpm covers the following CVE IDs: CVE-2026-1836. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-w8cj-56rx-3gpmMedium

The system stores the username and password from the login form after submitting the request....

Vendor

GitHub Security Advisories

Published

June 12, 2026

Last Modified

June 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-1836 →

📋 Description

The system stores the username and password from the login form after submitting the request. This could allow an attacker with access to the platform to return to the browser and view the login credentials.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-1836
https://www.incibe.es/en/incibe-cert/notices/aviso/stored-credentials-redmine
https://github.com/advisories/GHSA-w8cj-56rx-3gpm