What is GHSA-r33r-4v49-3hrg?

GHSA-r33r-4v49-3hrg is a security advisory published by GitHub Security Advisories with Medium severity. HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion...

Which CVE IDs does GHSA-r33r-4v49-3hrg cover?

GHSA-r33r-4v49-3hrg covers the following CVE IDs: CVE-2026-21753. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-r33r-4v49-3hrg?

GHSA-r33r-4v49-3hrg has a CVSS v3 base score of 4.2, published by GitHub Security Advisories.

GHSA-r33r-4v49-3hrgMediumCVSS 4.2

HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion...

Vendor

GitHub Security Advisories

Published

August 25, 2026

Last Modified

August 25, 2026

🔗 CVE IDs covered (1)

CVE-2026-21753 →

📋 Description

HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-21753
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0133342
https://github.com/advisories/GHSA-r33r-4v49-3hrg