What is GHSA-h56x-gr36-fv6h?

GHSA-h56x-gr36-fv6h is a security advisory published by GitHub Security Advisories with Medium severity. A user with edit access to one folder could modify, move or delete Git Sync provisioned resources...

Which CVE IDs does GHSA-h56x-gr36-fv6h cover?

GHSA-h56x-gr36-fv6h covers the following CVE IDs: CVE-2026-13721. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h56x-gr36-fv6h?

GHSA-h56x-gr36-fv6h has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-h56x-gr36-fv6hMediumCVSS 6.5

A user with edit access to one folder could modify, move or delete Git Sync provisioned resources...

Vendor

GitHub Security Advisories

Published

November 11, 2026

Last Modified

November 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-13721 →

📋 Description

A user with edit access to one folder could modify, move or delete Git Sync provisioned resources in folders where they only had view access, through the provisioning files API (incorrect authorization).

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-13721
https://grafana.com/security/security-advisories/cve-2026-13721
https://github.com/advisories/GHSA-h56x-gr36-fv6h