What is GHSA-4qr2-3mpc-grqm?

GHSA-4qr2-3mpc-grqm is a security advisory published by GitHub Security Advisories with High severity. A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization...

Which CVE IDs does GHSA-4qr2-3mpc-grqm cover?

GHSA-4qr2-3mpc-grqm covers the following CVE IDs: CVE-2026-57818. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4qr2-3mpc-grqm?

GHSA-4qr2-3mpc-grqm has a CVSS v3 base score of 8.1, published by GitHub Security Advisories.

GHSA-4qr2-3mpc-grqmHighCVSS 8.1

A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization...

Vendor

GitHub Security Advisories

Published

August 6, 2026

Last Modified

August 7, 2026

🔗 CVE IDs covered (1)

CVE-2026-57818 →

📋 Description

A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via concurrent requests, resulting in the issuance of multiple distinct, valid access tokens. Users are recommended to upgrade to versions 4.2.3, 4.1.8 or 3.6.12, which fix this issue.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-57818
https://lists.apache.org/thread/7q08mz8bcbosp25wok7gr537zlp15mfz
http://www.openwall.com/lists/oss-security/2026/08/06/20
https://github.com/advisories/GHSA-4qr2-3mpc-grqm