[GHSA-w5j6-7wpf-g6rw] A security vulnerability in the /apis/dashboard.grafana...

advisories/unreviewed/2026/01/GHSA-w5j6-7wpf-g6rw/GHSA-w5j6-7wpf-g6rw.json

@@ -1,54 +1,36 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-w5j6-7wpf-g6rw",
-  "modified": "2026-01-15T15:31:16Z",
+  "modified": "2026-01-15T15:31:26Z",
   "published": "2026-01-15T15:31:16Z",
   "aliases": [
     "CVE-2026-0713"
   ],
-  "details": "A security vulnerability in the /apis/dashboard.grafana.app/* endpoints allows authenticated users to bypass dashboard and folder permissions. The vulnerability affects all API versions (v0alpha1, v1alpha1, v2alpha1). Impact: - Viewers can view all dashboards/folders regardless of permissions - Editors can view/edit/delete all dashboards/folders regardless of permissions - Editors can create dashboards in any folder regardless of permissions - Anonymous users with viewer/editor roles are similarly affected Organization isolation boundaries remain intact. The vulnerability only affects dashboard access and does not grant access to datasources.",
-  "severity": [
-    {
-      "type": "CVSS_V3",
-      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L"
-    }
-  ],
-  "affected": [],
-  "references": [
-    {
-      "type": "ADVISORY",
-      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0713"
-    },
-    {
-      "type": "WEB",
-      "url": "https://sick.com/psirt"
-    },
-    {
-      "type": "WEB",
-      "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
-    },
-    {
-      "type": "WEB",
-      "url": "https://www.first.org/cvss/calculator/3.1"
-    },
-    {
-      "type": "WEB",
-      "url": "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.json"
-    },
-    {
-      "type": "WEB",
-      "url": "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.pdf"
-    },
-    {
-      "type": "WEB",
-      "url": "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf"
+  "summary": "CVE-2026-0713",
+  "details": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
+  "severity": [],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "SwiftURL",
+        "name": ""
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "0"
+            }
+          ]
+        }
+      ]
     }
   ],
+  "references": [],
   "database_specific": {
-    "cwe_ids": [
-      "CWE-863"
-    ],
-    "severity": "HIGH",
+    "cwe_ids": [],
+    "severity": "LOW",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2026-01-15T13:16:04Z"