What is GHSA-4ghv-c34h-v2jx?

GHSA-4ghv-c34h-v2jx is a security advisory published by GitHub Security Advisories with Medium severity. It was not possible to govern the maximum number of transfer frames per incoming delivery,...

Which CVE IDs does GHSA-4ghv-c34h-v2jx cover?

GHSA-4ghv-c34h-v2jx covers the following CVE IDs: CVE-2026-68078. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4ghv-c34h-v2jx?

GHSA-4ghv-c34h-v2jx has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-4ghv-c34h-v2jxMediumCVSS 6.5

It was not possible to govern the maximum number of transfer frames per incoming delivery,...

Vendor

GitHub Security Advisories

Published

August 5, 2026

Last Modified

August 5, 2026

🔗 CVE IDs covered (1)

CVE-2026-68078 →

📋 Description

It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.

This issue affects Apache Qpid Broker-J: through 10.0.1.

Users are recommended to upgrade to version 10.1.0, which fixes the issue.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-68078
https://lists.apache.org/thread/m8gs6pfp1fmbgwcjr8zsgn95hfh15f8o
http://www.openwall.com/lists/oss-security/2026/08/04/19
https://github.com/advisories/GHSA-4ghv-c34h-v2jx