What is GHSA-q92f-x3wf-xc2v?

GHSA-q92f-x3wf-xc2v is a security advisory published by GitHub Security Advisories with Critical severity. IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written...

Which CVE IDs does GHSA-q92f-x3wf-xc2v cover?

GHSA-q92f-x3wf-xc2v covers the following CVE IDs: CVE-2026-14973. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-q92f-x3wf-xc2v?

GHSA-q92f-x3wf-xc2v has a CVSS v3 base score of 9.3, published by GitHub Security Advisories.

GHSA-q92f-x3wf-xc2vCriticalCVSS 9.3

IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written...

Vendor

GitHub Security Advisories

Published

July 28, 2026

Last Modified

July 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-14973 →

📋 Description

IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-14973
https://www.ibm.com/support/pages/node/7280939
https://github.com/advisories/GHSA-q92f-x3wf-xc2v