What is GHSA-7894-3j9v-3r3h?

GHSA-7894-3j9v-3r3h is a security advisory published by GitHub Security Advisories with unknown severity. Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache...

Which CVE IDs does GHSA-7894-3j9v-3r3h cover?

GHSA-7894-3j9v-3r3h covers the following CVE IDs: CVE-2026-108823. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-7894-3j9v-3r3hunknown

Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache...

Vendor

GitHub Security Advisories

Published

October 19, 2026

Last Modified

October 19, 2026

🔗 CVE IDs covered (1)

CVE-2026-108823 →

📋 Description

Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache Kylin. The impact is minor unless job services are exposed to public network, which is uncommon.

This issue affects Apache Kylin: from 4.0.0 through 5.0.4.

Users are recommended to upgrade to version 5.0.5, which fixes the issue.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-108823
https://lists.apache.org/thread.html/bhcvh3oxcqcjklxfr2mn1j3f7pzxqz4b
http://www.openwall.com/lists/oss-security/2026/10/16/19
https://github.com/advisories/GHSA-7894-3j9v-3r3h