What is GHSA-2mr2-j2wm-v93x?

GHSA-2mr2-j2wm-v93x is a security advisory published by GitHub Security Advisories with High severity. A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the...

Which CVE IDs does GHSA-2mr2-j2wm-v93x cover?

GHSA-2mr2-j2wm-v93x covers the following CVE IDs: CVE-2026-49329. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2mr2-j2wm-v93x?

GHSA-2mr2-j2wm-v93x has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-2mr2-j2wm-v93xHighCVSS 7.5

A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the...

Vendor

GitHub Security Advisories

Published

September 1, 2026

Last Modified

September 1, 2026

🔗 CVE IDs covered (1)

CVE-2026-49329 →

📋 Description

A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Language header to golang.org/x/text/language.ParseAcceptLanguage() without input validation. A bypass of the CVE-2022-32149 mitigation exists: the upstream guard counts only '-' characters but the internal BCP 47 scanner aliases '' to '-' after the guard check. An unauthenticated attacker can send a crafted Accept-Language header using '' separators to trigger quadratic-time parsing, consuming excessive CPU and denying authentication to all cluster users.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-49329
https://access.redhat.com/security/cve/CVE-2026-49329
https://bugzilla.redhat.com/show_bug.cgi?id=2483248
https://github.com/advisories/GHSA-2mr2-j2wm-v93x