What is GHSA-vx4h-hjjm-mwrc?

GHSA-vx4h-hjjm-mwrc is a security advisory published by GitHub Security Advisories with High severity. UnixAuth lacks brute-force protection in Apache Ranger versions \u003c= 2.8.0. Note: UnixAuth is NOT...

Which CVE IDs does GHSA-vx4h-hjjm-mwrc cover?

GHSA-vx4h-hjjm-mwrc covers the following CVE IDs: CVE-2026-65948. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vx4h-hjjm-mwrc?

GHSA-vx4h-hjjm-mwrc has a CVSS v3 base score of 7.3, published by GitHub Security Advisories.

GHSA-vx4h-hjjm-mwrcHighCVSS 7.3

UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0. Note: UnixAuth is NOT...

Vendor

GitHub Security Advisories

Published

August 10, 2026

Last Modified

August 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-65948 →

📋 Description

UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0. Note: UnixAuth is NOT a recommended option for production deployments. Users are recommended to upgrade to version 2.9.0, which fixes this issue.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-65948
https://lists.apache.org/thread/cx53rbkxkn5hbvzv8ohwvndzrxhc06qf
http://www.openwall.com/lists/oss-security/2026/08/09/11
https://github.com/advisories/GHSA-vx4h-hjjm-mwrc