GHSA-qhfj-g87x-m39w

Facts

Severity

High · CVSS score 8.6CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Affected versions (appsmith/appsmith-ce)

<= 2.1As entered by the maintainer. Not reviewed.

Fixed in (appsmith/appsmith-ce)

v2.2

Affected versions (appsmith/appsmith-ee)

<= 2.1As entered by the maintainer. Not reviewed.

Fixed in (appsmith/appsmith-ee)

v2.2

Affected versions (helm.appsmith.com/appsmith)

<= 3.8.1As entered by the maintainer. Not reviewed.

Fixed in (helm.appsmith.com/appsmith)

3.9.0

Affected versions (helm-ee.appsmith.com/appsmith)

<= 3.8.1As entered by the maintainer. Not reviewed.

Fixed in (helm-ee.appsmith.com/appsmith)

3.9.0

Affected versions (com.appsmith:server)

<= 2.1As entered by the maintainer. Not reviewed.

Fixed in (com.appsmith:server)

2.2

CVE

None cited by the advisory

GitHub Advisory Database

Not reviewed

OSV.dev

Not present

Other CVEs pointing here

None found in the CVE List

Timeline

1. 2026-08-12 19:13 UTC

   Published by the maintainers

   No CVE cited

2. 2026-10-28 07:18 UTC

   First seen by Limbowatch

   not reviewed · not in OSV

3. Waiting

   Reviewed by GitHub

4. Waiting

   In OSV; scanners can see it

Machine-readable record: feed/GHSA-qhfj-g87x-m39w.json