What is GHSA-48v3-gqwp-rxgg?

GHSA-48v3-gqwp-rxgg is a security advisory published by GitHub Security Advisories with Medium severity. Apache Allura: stored XSS via SVN code repositories. Git repositories are not known to be...

Which CVE IDs does GHSA-48v3-gqwp-rxgg cover?

GHSA-48v3-gqwp-rxgg covers the following CVE IDs: CVE-2026-80190. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-48v3-gqwp-rxgg?

GHSA-48v3-gqwp-rxgg has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

GHSA-48v3-gqwp-rxggMediumCVSS 6.1

Apache Allura: stored XSS via SVN code repositories. Git repositories are not known to be...

Vendor

GitHub Security Advisories

Published

September 4, 2026

Last Modified

September 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-80190 →

📋 Description

Apache Allura: stored XSS via SVN code repositories. Git repositories are not known to be affected. The vulnerability is likely mitigated via default CSP headers.

This issue affects Apache Allura: through 1.20.0.

Users are recommended to upgrade to version 1.21.0, which fixes the issue.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-80190
https://lists.apache.org/thread/fsj2dgdzskky4wkckhh3fth0ogj5trq2
http://www.openwall.com/lists/oss-security/2026/09/03/5
https://github.com/advisories/GHSA-48v3-gqwp-rxgg