What is GHSA-qhf2-jq27-4g43?

GHSA-qhf2-jq27-4g43 is a security advisory published by GitHub Security Advisories with unknown severity. Some docker-compose shipped by the project exposes by default Webadmin REST API publically...

Which CVE IDs does GHSA-qhf2-jq27-4g43 cover?

GHSA-qhf2-jq27-4g43 covers the following CVE IDs: CVE-2026-74756. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-qhf2-jq27-4g43unknown

Some docker-compose shipped by the project exposes by default Webadmin REST API publically...

Vendor

GitHub Security Advisories

Published

November 6, 2026

Last Modified

November 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-74756 →

📋 Description

Some docker-compose shipped by the project exposes by default Webadmin REST API publically without proper authentication setup. Version 3.9.1 onward sets a random credential by default on unprotected webadmin endpoints to prevent this while retain convenience.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-74756
https://lists.apache.org/thread.html/5zhn007mc3jz691zhb2687ow2n7f0zp0
http://www.openwall.com/lists/oss-security/2026/11/06/15
https://github.com/advisories/GHSA-qhf2-jq27-4g43