What is GHSA-4cqm-fq4g-r4vq?

GHSA-4cqm-fq4g-r4vq is a security advisory published by GitHub Security Advisories with Medium severity. It was not possible to govern the maximum number of transfer frames per incoming delivery,...

Which CVE IDs does GHSA-4cqm-fq4g-r4vq cover?

GHSA-4cqm-fq4g-r4vq covers the following CVE IDs: CVE-2026-67555. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4cqm-fq4g-r4vq?

GHSA-4cqm-fq4g-r4vq has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-4cqm-fq4g-r4vqMediumCVSS 6.5

It was not possible to govern the maximum number of transfer frames per incoming delivery,...

Vendor

GitHub Security Advisories

Published

August 5, 2026

Last Modified

August 5, 2026

🔗 CVE IDs covered (1)

CVE-2026-67555 →

📋 Description

It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service

This issue affects Apache Qpid Proton-Dotnet: through 1.0.0.

Users are recommended to upgrade to version 1.1.0, which fixes the issue.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-67555
https://lists.apache.org/thread/dwrb02dp714lvlfxdj4o5bc9h3z54sw3
http://www.openwall.com/lists/oss-security/2026/08/04/26
https://github.com/advisories/GHSA-4cqm-fq4g-r4vq