What is GHSA-4pm6-4pwh-f3gg?

GHSA-4pm6-4pwh-f3gg is a security advisory published by GitHub Security Advisories with Medium severity. IBM Watson Speech Services Cartridge is vulnerable to Server-Side Request Forgery (SSRF) in...

Which CVE IDs does GHSA-4pm6-4pwh-f3gg cover?

GHSA-4pm6-4pwh-f3gg covers the following CVE IDs: CVE-2026-7253. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4pm6-4pwh-f3gg?

GHSA-4pm6-4pwh-f3gg has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-4pm6-4pwh-f3ggMediumCVSS 5.3

IBM Watson Speech Services Cartridge is vulnerable to Server-Side Request Forgery (SSRF) in...

Vendor

GitHub Security Advisories

Published

June 22, 2026

Last Modified

June 22, 2026

🔗 CVE IDs covered (1)

CVE-2026-7253 →

📋 Description

IBM Watson Speech Services Cartridge is vulnerable to Server-Side Request Forgery (SSRF) in Sterling File Gateway, due to a flaw which may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks [GHSA-rr7j-v2q5-chgv] [CVE-2026-7253]. IBM Sterling File Gateway is used in our speech runtimes. This vulnerabilitiy has been addressed. Please read the details for remediation below.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-7253
https://www.ibm.com/support/pages/node/7276994
https://github.com/advisories/GHSA-4pm6-4pwh-f3gg