CVE-2026-51385

EUVD-2026-46141
An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code via the validate_url, safe_fetch, _build_opener, _fetch_html and _download_binary functions.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 42.77%
Common Weakness Enumeration
References
https://github.com/Arturo0x90/CVE-2026-51385/
https://graphify.com
https://lock.cmpxchg8b.com/rebinder.html
https://github.com/Arturo0x90/CVE-2026-51385/