VDB
GHSA-rv3f-cww5-rv8r
GHSA-rv3f-cww5-rv8r
PUBLISHED
CVSS 8.800000190734863 HIGH
Record from GitHub Advisory Database · Published July 27, 2023
The issue was addressed with improved checks. This issue is fixed in Safari 16.6, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, watchOS 9.6, tvOS 16.6. Processing web content may lead to arbitrary code execution.
Risk scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Timeline
- Jul 27, 2023 CVE Published
- Apr 10, 2026 Distribution Patch
- Apr 10, 2026 Security Advisory (3 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-rv3f-cww5-rv8r
vulnetix vdb fixes GHSA-rv3f-cww5-rv8r
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-rv3f-cww5-rv8r/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2023-38594 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER url
- http://www.openwall.com/lists/oss-security/2023/08/02/1 url
- https://support.apple.com/en-us/HT213848 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M url
- https://security.gentoo.org/glsa/202401-04 advisory
- https://support.apple.com/en-us/HT213841 advisory
- https://support.apple.com/en-us/HT213843 advisory
- https://support.apple.com/en-us/HT213842 advisory
- https://support.apple.com/en-us/HT213846 advisory
- https://support.apple.com/en-us/HT213847 advisory
- https://www.debian.org/security/2023/dsa-5468 advisory