What is GHSA-gcj9-mrfx-49v9?

GHSA-gcj9-mrfx-49v9 is a security advisory published by GitHub Security Advisories with Medium severity. An authorization weakness in JFrog Artifactory Composer repository handling may allow an...

Which CVE IDs does GHSA-gcj9-mrfx-49v9 cover?

GHSA-gcj9-mrfx-49v9 covers the following CVE IDs: CVE-2026-70550. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gcj9-mrfx-49v9?

GHSA-gcj9-mrfx-49v9 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-gcj9-mrfx-49v9MediumCVSS 6.5

An authorization weakness in JFrog Artifactory Composer repository handling may allow an...

Vendor

GitHub Security Advisories

Published

August 25, 2026

Last Modified

August 25, 2026

🔗 CVE IDs covered (1)

CVE-2026-70550 →

📋 Description

An authorization weakness in JFrog Artifactory Composer repository handling may allow an authenticated user, under specific conditions, to read package metadata from repositories they are not authorized to read. The issue affects confidentiality and has been addressed in fixed Artifactory versions.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-70550
https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases
https://docs.jfrog.com/releases/docs/jfrog-security-advisories
https://github.com/advisories/GHSA-gcj9-mrfx-49v9