What is GHSA-qcp2-2xf6-hw26?

GHSA-qcp2-2xf6-hw26 is a security advisory published by GitHub Security Advisories with Critical severity. When oxenstored is tearing a domain down, the node data is cleaned up but the usage counts are...

Which CVE IDs does GHSA-qcp2-2xf6-hw26 cover?

GHSA-qcp2-2xf6-hw26 covers the following CVE IDs: CVE-2026-23556. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-qcp2-2xf6-hw26Critical

When oxenstored is tearing a domain down, the node data is cleaned up but the usage counts are...

Vendor

GitHub Security Advisories

Published

July 9, 2026

Last Modified

July 9, 2026

🔗 CVE IDs covered (1)

CVE-2026-23556 →

📋 Description

When oxenstored is tearing a domain down, the node data is cleaned up but the usage counts are leaked.

When the domain ID is eventually reused, the new domain can create fewer nodes before beeing deemed to be over quota.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-23556
https://xenbits.xen.org/xsa/advisory-483.html
http://www.openwall.com/lists/oss-security/2026/04/28/10
http://xenbits.xen.org/xsa/advisory-483.html
https://github.com/advisories/GHSA-qcp2-2xf6-hw26