VDB
GHSA-g7xp-7fwj-m5hv
GHSA-g7xp-7fwj-m5hv
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Record from GitHub Advisory Database · Published April 1, 2025
An injection issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access user-sensitive data.
Risk scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Timeline
- Apr 1, 2025 CVE Published
- Apr 10, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-g7xp-7fwj-m5hv
vulnetix vdb fixes GHSA-g7xp-7fwj-m5hvOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-g7xp-7fwj-m5hv/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://support.apple.com/en-us/122373 url
- https://support.apple.com/en-us/122375 url
- http://seclists.org/fulldisclosure/2025/Apr/9 url
- https://nvd.nist.gov/vuln/detail/CVE-2025-24246 advisory
- http://seclists.org/fulldisclosure/2025/Apr/10 url
- http://seclists.org/fulldisclosure/2025/Apr/8 url
- https://support.apple.com/en-us/122374 url