What is GHSA-93gm-r5p2-wxq7?

GHSA-93gm-r5p2-wxq7 is a security advisory published by GitHub Security Advisories with Critical severity. Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an...

Which CVE IDs does GHSA-93gm-r5p2-wxq7 cover?

GHSA-93gm-r5p2-wxq7 covers the following CVE IDs: CVE-2026-111823. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-93gm-r5p2-wxq7?

GHSA-93gm-r5p2-wxq7 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-93gm-r5p2-wxq7CriticalCVSS 9.8

Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an...

Vendor

GitHub Security Advisories

Published

October 17, 2026

Last Modified

October 17, 2026

🔗 CVE IDs covered (1)

CVE-2026-111823 →

📋 Description

Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2026-111823
https://github.com/mage-ai/mage-ai/pull/6204
https://github.com/mage-ai/mage-ai/pull/6204/changes/76c4f467f3654041d8899b1c4447a985710d26c0
https://github.com/mage-ai/mage-ai/pull/6205
https://thecoregroup.net/category/the-core-group
https://github.com/advisories/GHSA-93gm-r5p2-wxq7