What is GHSA-ww36-383p-7577?

GHSA-ww36-383p-7577 is a security advisory published by GitHub Security Advisories with High severity. Płatnik performs client-side authentication. An attacker with access to any application instance...

Which CVE IDs does GHSA-ww36-383p-7577 cover?

GHSA-ww36-383p-7577 covers the following CVE IDs: CVE-2026-110972. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-ww36-383p-7577High

Płatnik performs client-side authentication. An attacker with access to any application instance...

Vendor

GitHub Security Advisories

Published

October 30, 2026

Last Modified

October 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-110972 →

📋 Description

Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user.

This issue was fixed in metric 242 in version 10.02.002.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-110972
https://cert.pl/posts/2026/10/CVE-2026-110970
https://www.zus.pl/firmy/program-platnik/o-programie-platnik
https://github.com/advisories/GHSA-ww36-383p-7577