GHSA-92f3-38m7-579h

Facts

Severity

Medium · CVSS score 6.8CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Affected versions (ClearanceKit)

<= 5.0.3, v5.0.4-beta-90ffdf2, v5.0.4-beta-7795456, v5.0.4-beta-7c520a0, v5.0.4-beta-746c770, v5.0.4-beta-fc9d6f7, v5.0.4-beta-2ab3798, v5.0.4-beta-4343a17, v5.0.4-beta-3005356, v5.0.4-beta-9bf3d64, v5.0.4-beta-d203f0e, v5.0.4-beta-e353aa8, v5.0.4-beta-2441e70As entered by the maintainer. Not reviewed. Scanners can’t read this range. How to fix it

Fixed in (ClearanceKit)

>= 5.0.4, v5.0.4-beta-1f46165, v5.0.4-beta-a993d34

Affected versions (uk.craigbass.clearancekit.opfilter)

<= 5.0.3, v5.0.4-beta-90ffdf2, v5.0.4-beta-7795456, v5.0.4-beta-7c520a0, v5.0.4-beta-746c770, v5.0.4-beta-fc9d6f7, v5.0.4-beta-2ab3798, v5.0.4-beta-4343a17, v5.0.4-beta-3005356, v5.0.4-beta-9bf3d64, v5.0.4-beta-d203f0e, v5.0.4-beta-e353aa8, v5.0.4-beta-2441e70As entered by the maintainer. Not reviewed. Scanners can’t read this range. How to fix it

Fixed in (uk.craigbass.clearancekit.opfilter)

>= 5.0.4, v5.0.4-beta-1f46165, v5.0.4-beta-a993d34

CVE

CVE-2026-40191 · published

GitHub Advisory Database

Not reviewed

OSV.dev

Not present

Other CVEs pointing here

None found in the CVE List

Timeline

1. 2026-04-09 22:48 UTC

   Published by the maintainers

   Cites CVE-2026-40191

2. 2026-10-31 12:45 UTC

   First seen by Limbowatch

   not reviewed · not in OSV

3. Not expected

   Reviewed by GitHub

   GitHub doesn’t review this ecosystem

Machine-readable record: feed/GHSA-92f3-38m7-579h.json