What is GHSA-w2wx-887f-65f8?

GHSA-w2wx-887f-65f8 is a security advisory published by GitHub Security Advisories with Medium severity. A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's...

Which CVE IDs does GHSA-w2wx-887f-65f8 cover?

GHSA-w2wx-887f-65f8 covers the following CVE IDs: CVE-2026-95502. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-w2wx-887f-65f8?

GHSA-w2wx-887f-65f8 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-w2wx-887f-65f8MediumCVSS 5.3

A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's...

Vendor

GitHub Security Advisories

Published

October 13, 2026

Last Modified

October 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-95502 →

📋 Description

A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses (uncontrolled resource consumption). Exploitation requires an administrator to have configured Git Sync with that server.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-95502
https://grafana.com/security/security-advisories/cve-2026-95502
https://github.com/advisories/GHSA-w2wx-887f-65f8