VDB
GHSA-2xvj-j4wx-pf4c
GHSA-2xvj-j4wx-pf4c
PUBLISHED
CVSS 5.5 MEDIUM
Record from GitHub Advisory Database · Published January 28, 2025
This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.2, visionOS 2.2, tvOS 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, macOS Sonoma 14.7.2, macOS Sequoia 15.2. An app may be able to access user-sensitive data.
Risk scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Timeline
- Jan 28, 2025 CVE Published
- Apr 10, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-2xvj-j4wx-pf4c
vulnetix vdb fixes GHSA-2xvj-j4wx-pf4cOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-2xvj-j4wx-pf4c/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://support.apple.com/en-us/121837 url
- https://support.apple.com/en-us/121839 url
- https://support.apple.com/en-us/121842 url
- https://support.apple.com/en-us/121843 url
- https://support.apple.com/en-us/121845 url
- https://nvd.nist.gov/vuln/detail/CVE-2024-54541 advisory
- https://support.apple.com/en-us/121840 url
- https://support.apple.com/en-us/121844 url