VDB
GHSA-3prx-m3mm-fp9r
GHSA-3prx-m3mm-fp9r
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Record from GitHub Advisory Database · Published July 30, 2025
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox.
Risk scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Timeline
- Jul 30, 2025 CVE Published
- May 1, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-3prx-m3mm-fp9r
vulnetix vdb fixes GHSA-3prx-m3mm-fp9rOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-3prx-m3mm-fp9r/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2025-43261 advisory
- https://support.apple.com/en-us/124150 url
- http://seclists.org/fulldisclosure/2025/Jul/32 url
- http://seclists.org/fulldisclosure/2025/Jul/33 url
- http://seclists.org/fulldisclosure/2025/Jul/34 url
- https://support.apple.com/en-us/124149 url
- https://support.apple.com/en-us/124151 url