What is GHSA-p4v4-3mfq-ffjr?

GHSA-p4v4-3mfq-ffjr is a security advisory published by GitHub Security Advisories with Medium severity. IBM DevOps Plan 3.0.0 through 3.0.6 is vulnerable to HTTP header injection, caused by improper...

Which CVE IDs does GHSA-p4v4-3mfq-ffjr cover?

GHSA-p4v4-3mfq-ffjr covers the following CVE IDs: CVE-2026-4096. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-p4v4-3mfq-ffjr?

GHSA-p4v4-3mfq-ffjr has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-p4v4-3mfq-ffjrMediumCVSS 6.5

IBM DevOps Plan 3.0.0 through 3.0.6 is vulnerable to HTTP header injection, caused by improper...

Vendor

GitHub Security Advisories

Published

June 11, 2026

Last Modified

June 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-4096 →

📋 Description

IBM DevOps Plan 3.0.0 through 3.0.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-4096
https://www.ibm.com/support/pages/node/7275005
https://github.com/advisories/GHSA-p4v4-3mfq-ffjr