What is GHSA-w2gr-585j-r428?

GHSA-w2gr-585j-r428 is a security advisory published by GitHub Security Advisories with Medium severity. Metricbeat affected by multiple denial of service vulnerabilities

Which CVE IDs does GHSA-w2gr-585j-r428 cover?

GHSA-w2gr-585j-r428 covers the following CVE IDs: CVE-2026-0528. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-w2gr-585j-r428?

GHSA-w2gr-585j-r428 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

Which products are affected by GHSA-w2gr-585j-r428?

GHSA-w2gr-585j-r428 affects 4 products, including: go/github.com/elastic/beats/v7:\u003c 7.0.0-alpha2.0.20251217054608-6e42552a23ce; go/github.com/elastic/beats/v7:\u003e= 8.0.0, \u003c 8.19.10; go/github.com/elastic/beats/v7:\u003e= 9.0.0, \u003c 9.1.10; go/github.com/elastic/beats/v7:\u003e= 9.2.0, \u003c 9.2.4.

GHSA-w2gr-585j-r428MediumCVSS 6.5

Metricbeat affected by multiple denial of service vulnerabilities

Vendor

GitHub Security Advisories

Published

January 13, 2026

Last Modified

January 22, 2026

🔗 CVE IDs covered (1)

CVE-2026-0528 →

📋 Description

Improper Validation of Array Index (CWE-129) exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation (CAPEC-153) via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input Validation (CWE-20) exists in the Prometheus helper module that can allow an attacker to cause a Denial of Service through Input Data Manipulation (CAPEC-153) via specially crafted, malformed metric data.

🎯 Affected products4

go/github.com/elastic/beats/v7:< 7.0.0-alpha2.0.20251217054608-6e42552a23ce
go/github.com/elastic/beats/v7:>= 8.0.0, < 8.19.10
go/github.com/elastic/beats/v7:>= 9.0.0, < 9.1.10
go/github.com/elastic/beats/v7:>= 9.2.0, < 9.2.4

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products4

🔗 References (6)