GHSA-qrwp-cxq9-rvqx

Facts

Severity

High · CVSS score 7.2CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected versions (opensource-workshop/connect-cms)

<= 1.44.0As entered by the maintainer. Not reviewed.

Fixed in (opensource-workshop/connect-cms)

1.44.1

Affected versions (opensource-workshop/connect-cms)

<= 2.44.0As entered by the maintainer. Not reviewed.

Fixed in (opensource-workshop/connect-cms)

2.44.1

CVE

None cited by the advisory

GitHub Advisory Database

Not reviewed

OSV.dev

Not present

Other CVEs pointing here

None found in the CVE List

Timeline

1. 2026-08-03 04:20 UTC

   Published by the maintainers

   No CVE cited

2. 2026-10-28 08:42 UTC

   First seen by Limbowatch

   not reviewed · not in OSV

3. Not expected

   Reviewed by GitHub

   GitHub doesn’t review this ecosystem

Machine-readable record: feed/GHSA-qrwp-cxq9-rvqx.json