CVE-2026-51385 PUBLISHED

Assigner: mitre
Reserved: 07.06.2026 Published: 20.07.2026 Updated: 21.07.2026

An issue in safishamsi Open-Source GRAPHIFY v.0.3.2 through v0.4.29 allows a remote attacker to execute arbitrary code via the validate_url, safe_fetch, _build_opener, _fetch_html and _download_binary functions.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AC:H/AV:N/A:N/C:H/I:L/PR:N/S:C/UI:R
CVSS Score: 6.9

Attack Vector	Network	Scope	Changed
Attack Complexity	High	Confidentiality Impact	High
Privileges Required	None	Integrity Impact	Low
User Interaction	Required	Availability Impact	None

CVSS 3.1

Product Status

Vendor	n/a
Product	n/a
Versions	Version n/a is affected

References

https://graphify.com
https://lock.cmpxchg8b.com/rebinder.html
https://github.com/Arturo0x90/CVE-2026-51385/

Problem Types

n/a text