What is GHSA-5vrw-qjxw-89r5?

GHSA-5vrw-qjxw-89r5 is a security advisory published by GitHub Security Advisories with Medium severity. Metricbeat Allocates Memory with Excessive Size Value Leading to Denial of Service

Which CVE IDs does GHSA-5vrw-qjxw-89r5 cover?

GHSA-5vrw-qjxw-89r5 covers the following CVE IDs: CVE-2026-26931. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5vrw-qjxw-89r5?

GHSA-5vrw-qjxw-89r5 has a CVSS v3 base score of 5.7, published by GitHub Security Advisories.

Which products are affected by GHSA-5vrw-qjxw-89r5?

GHSA-5vrw-qjxw-89r5 affects 1 product, including: go/github.com/elastic/beats/v7:\u003c 7.0.0-alpha2.0.20260112100137-de072c4e371e.

GHSA-5vrw-qjxw-89r5MediumCVSS 5.7

Metricbeat Allocates Memory with Excessive Size Value Leading to Denial of Service

Vendor

GitHub Security Advisories

Published

March 19, 2026

Last Modified

March 19, 2026

🔗 CVE IDs covered (1)

CVE-2026-26931 →

📋 Description

Memory Allocation with Excessive Size Value (CWE-789) in the Prometheus remote_write HTTP handler in Metricbeat can lead Denial of Service via Excessive Allocation (CAPEC-130).

🎯 Affected products1

go/github.com/elastic/beats/v7:< 7.0.0-alpha2.0.20260112100137-de072c4e371e

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-26931
https://discuss.elastic.co/t/metricbeat-8-19-13-9-2-5-security-update-esa-2026-09/385532
https://github.com/elastic/beats/commit/de072c4e371eafeb2a42d65b9ad513f666e4ffd7
https://github.com/advisories/GHSA-5vrw-qjxw-89r5