CVE-2026-51385

—

CVSS 3.1

6.9 medium

EPSS

<1%p43

Published

Jul 20, 2026 (Jul 20, 2026)

Modified

Jul 23, 2026

Description

An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code via the validate_url, safe_fetch, _build_opener, _fetch_html and _download_binary functions.

Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.