What is GHSA-j722-97vw-3p9m?

GHSA-j722-97vw-3p9m is a security advisory published by GitHub Security Advisories with High severity. The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an attacker to write...

Which CVE IDs does GHSA-j722-97vw-3p9m cover?

GHSA-j722-97vw-3p9m covers the following CVE IDs: CVE-2026-47826. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j722-97vw-3p9m?

GHSA-j722-97vw-3p9m has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-j722-97vw-3p9mHighCVSS 8.8

The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an attacker to write...

Vendor

GitHub Security Advisories

Published

July 9, 2026

Last Modified

July 9, 2026

🔗 CVE IDs covered (1)

CVE-2026-47826 →

📋 Description

The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an attacker to write arbitrary files and exfiltrate sensitive information. Affected versions: BOSH CLI tool versions prior to v7.10.4.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-47826
https://www.cloudfoundry.org/blog/cve-2026-47826-blobs-yaml-path-traversal-allows-file-writes
https://github.com/advisories/GHSA-j722-97vw-3p9m