What is GHSA-7fm8-645h-m2pm?

GHSA-7fm8-645h-m2pm is a security advisory published by GitHub Security Advisories with Critical severity. This issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27.2, iOS...

Which CVE IDs does GHSA-7fm8-645h-m2pm cover?

GHSA-7fm8-645h-m2pm covers the following CVE IDs: CVE-2026-113897. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7fm8-645h-m2pm?

GHSA-7fm8-645h-m2pm has a CVSS v3 base score of 10.0, published by GitHub Security Advisories.

GHSA-7fm8-645h-m2pmCriticalCVSS 10.0

This issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27.2, iOS...

Vendor

GitHub Security Advisories

Published

October 26, 2026

Last Modified

November 3, 2026

🔗 CVE IDs covered (1)

CVE-2026-113897 →

📋 Description

This issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. A remote attacker may be able to break out of Web Content sandbox.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2026-113897
https://support.apple.com/en-us/149230
https://support.apple.com/en-us/149521
https://support.apple.com/en-us/149526
https://support.apple.com/en-us/149527
https://github.com/advisories/GHSA-7fm8-645h-m2pm