What is GHSA-79rm-9vfm-ggww?

GHSA-79rm-9vfm-ggww is a security advisory published by GitHub Security Advisories with Low severity. Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an...

Which CVE IDs does GHSA-79rm-9vfm-ggww cover?

GHSA-79rm-9vfm-ggww covers the following CVE IDs: CVE-2026-78243. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-79rm-9vfm-ggwwLow

Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an...

Vendor

GitHub Security Advisories

Published

October 7, 2026

Last Modified

October 7, 2026

🔗 CVE IDs covered (1)

CVE-2026-78243 →

📋 Description

Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership entries.If the LDAP server returns a group membership entry, memberOf attribute, for a user specified in the pod the server crashes if a membership record does not start with "CN=".

This only affects install that have the non default LDAP group provider configured.

Users are recommended to upgrade to version 1.10.0, which fixes this issue.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-78243
https://lists.apache.org/thread.html/yz51lpj6k8q2hz7x2gjdpcrk44hdn25v
http://www.openwall.com/lists/oss-security/2026/10/07/24
https://github.com/advisories/GHSA-79rm-9vfm-ggww