What is GHSA-6w6g-ww2r-qrcm?

GHSA-6w6g-ww2r-qrcm is a security advisory published by GitHub Security Advisories with Medium severity. Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of...

Which CVE IDs does GHSA-6w6g-ww2r-qrcm cover?

GHSA-6w6g-ww2r-qrcm covers the following CVE IDs: CVE-2026-103005. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-6w6g-ww2r-qrcm?

GHSA-6w6g-ww2r-qrcm has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-6w6g-ww2r-qrcmMediumCVSS 6.5

Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of...

Vendor

GitHub Security Advisories

Published

October 6, 2026

Last Modified

October 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-103005 →

📋 Description

Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with connector management privileges could cause the cluster to allocate an uncontrolled amount of memory when connector resources with an excessively large description field are created and subsequently accessed, exhausting available heap memory and crashing the affected node.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-103005
https://discuss.elastic.co/t/elasticsearch-8-19-23-9-4-8-9-5-5-security-update-esa-2026-195/390869
https://github.com/advisories/GHSA-6w6g-ww2r-qrcm