What is GHSA-j7jj-549c-j492?

GHSA-j7jj-549c-j492 is a security advisory published by GitHub Security Advisories with Medium severity. An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values,...

Which CVE IDs does GHSA-j7jj-549c-j492 cover?

GHSA-j7jj-549c-j492 covers the following CVE IDs: CVE-2026-8609. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j7jj-549c-j492?

GHSA-j7jj-549c-j492 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-j7jj-549c-j492MediumCVSS 5.3

An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values,...

Vendor

GitHub Security Advisories

Published

July 10, 2026

Last Modified

July 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-8609 →

📋 Description

An unauthenticated attacker can repeatedly call Grafana's OAuth login route with unique values, causing unbounded memory growth that can eventually exhaust memory and crash the Grafana instance (denial of service).

🔗 References (1)

https://github.com/advisories/GHSA-j7jj-549c-j492