What is GHSA-g5v7-jchf-7jrr?

GHSA-g5v7-jchf-7jrr is a security advisory published by GitHub Security Advisories with Critical severity. A logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP...

Which CVE IDs does GHSA-g5v7-jchf-7jrr cover?

GHSA-g5v7-jchf-7jrr covers the following CVE IDs: CVE-2026-50628. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-g5v7-jchf-7jrr?

GHSA-g5v7-jchf-7jrr has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-g5v7-jchf-7jrrCriticalCVSS 9.8

A logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP...

Vendor

GitHub Security Advisories

Published

June 12, 2026

Last Modified

June 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-50628 →

📋 Description

A logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP address, while blindly allowing requests from any other IP address. Enabling this

security feature inadvertently creates an inverse security check. Users are recommended to upgrade to versions 4.2.2 or 4.1.7, which fixes this issue.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-50628
https://lists.apache.org/thread/vb3ho8lf228gh90m1fpnohf2008xrdxk
http://www.openwall.com/lists/oss-security/2026/06/11/5
https://github.com/advisories/GHSA-g5v7-jchf-7jrr