ghsa:GHSA-PCC4-RVHR-2PR8: graphifyy >= 0.7.2, < 0.9.70

Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo. Affected range: >= 0.7.2, < 0.9.70. Fixed version: 0.9.70.

Affected technology

graphifyy · >= 0.7.2, < 0.9.70
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 21-Oct-2026 05:33 UTC

Product: graphifyy
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-21 04:17:24.410927+00:00 UTC

Stable permalink: https://cybercodered.org/item/adv-ghsa-ghsa-pcc4-rvhr-2pr8.html