{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-100347", "tracking": { "current_release_date": "2026-10-22T13:51:47.765588Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-100347", "initial_release_date": "2026-10-15T17:06:13.584827Z", "revision_history": [ { "date": "2026-10-15T17:06:13.584827Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (3).| CWES updated (1)." }, { "date": "2026-10-15T17:06:20.235013Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-10-15T20:40:10.517879Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (5).| CWES updated (1)." }, { "date": "2026-10-16T00:28:31.385035Z", "number": "4", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (6).| Product Identifiers created (1).| References created (5).| CWES updated (1).| Vendor_assessment created." }, { "date": "2026-10-16T00:28:33.053769Z", "number": "5", "summary": "NCSC Score updated." }, { "date": "2026-10-16T18:43:56.372383Z", "number": "6", "summary": "Source created.| CVE status created. (valid)| Description created for source.| Products connected (1)." }, { "date": "2026-10-17T14:27:09.782940Z", "number": "7", "summary": "NCSC Score updated." }, { "date": "2026-10-19T10:58:28.956564Z", "number": "8", "summary": "CVSS created.| CWES created (2).| Products created (1).| References created (4).| Description created for source.| Unknown change." }, { "date": "2026-10-19T10:58:40.305871Z", "number": "9", "summary": "NCSC Score updated." }, { "date": "2026-10-20T04:06:50.036123Z", "number": "10", "summary": "CVSS created.| CWES created (2).| Products created (148).| References created (5).| Description created for source.| Unknown change." }, { "date": "2026-10-20T07:30:54.982243Z", "number": "11", "summary": "EPSS created.| Unknown change." }, { "date": "2026-10-20T07:39:49.667302Z", "number": "12", "summary": "NCSC Score updated." }, { "date": "2026-10-20T16:34:44.397672Z", "number": "13", "summary": "CVSS created.| CWES created (2).| Unknown change.| Products created (1).| References created (3).| Description created for source.| Unknown change." }, { "date": "2026-10-20T16:34:51.476232Z", "number": "14", "summary": "NCSC Score updated." }, { "date": "2026-10-21T00:52:35.488741Z", "number": "15", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (2).| Product Remediations created (2).| Product Identifiers created (4).| Product Identifiers removed (4).| References created (19).| CWES updated (1)." }, { "date": "2026-10-21T00:52:49.682806Z", "number": "16", "summary": "NCSC Score updated." }, { "date": "2026-10-22T13:51:40.649528Z", "number": "17", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (2).| Product Remediations created (2).| Product Identifiers created (4).| Product Identifiers removed (4).| References created (23).| CWES updated (1)." }, { "date": "2026-10-22T13:51:43.275711Z", "number": "18", "summary": "NCSC Score updated." } ], "status": "interim", "version": "18" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1", "product": { "name": "vers:rpm/1", "product_id": "CSAFPID-6014972", "product_identification_helper": { "cpe": "cpe:/a:redhat:hummingbird:1" } } } ], "category": "product_name", "name": "Red Hat Hardened Images" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9710183" } } ], "category": "product_name", "name": "go-fdo-server" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8902830" } } ], "category": "product_name", "name": "grafana12.4" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/13.1.8-0.3.hum1", "product": { "name": "vers:rpm/13.1.8-0.3.hum1", "product_id": "CSAFPID-9821941", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana13.1@13.1.8-0.3.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms" } } }, { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-8902831" } } ], "category": "product_name", "name": "grafana13.1" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/13.2.3-0.3.hum1", "product": { "name": "vers:rpm/13.2.3-0.3.hum1", "product_id": "CSAFPID-9764774", "product_identification_helper": { "purl": "pkg:rpm/redhat/grafana13.2@13.2.3-0.3.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms" } } }, { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9053231" } } ], "category": "product_name", "name": "grafana13.2" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-9053232" } } ], "category": "product_name", "name": "hugo" } ], "category": "product_family", "name": "Red Hat Hardened Images" } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:deb/unknown", "product": { "name": "vers:deb/unknown", "product_id": "CSAFPID-8980229" } } ], "category": "product_name", "name": "golang-github-getkin-kin-openapi" } ], "category": "product_family", "name": "bookworm" } ], "category": "vendor", "name": "debian" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<0.145.0", "product": { "name": "vers:unknown/<0.145.0", "product_id": "CSAFPID-9740713" } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<0.145.0", "product": { "name": "vers:unknown/>=0|<0.145.0", "product_id": "CSAFPID-9725716" } }, { "category": "product_version_range", "name": "vers:unknown/v0.1.0", "product": { "name": "vers:unknown/v0.1.0", "product_id": "CSAFPID-3787747" } }, { "category": "product_version_range", "name": "vers:unknown/v0.10.0", "product": { "name": "vers:unknown/v0.10.0", "product_id": "CSAFPID-3787748" } }, { "category": "product_version_range", "name": "vers:unknown/v0.100.0", "product": { "name": "vers:unknown/v0.100.0", "product_id": "CSAFPID-3787749" } }, { "category": "product_version_range", "name": "vers:unknown/v0.101.0", "product": { "name": "vers:unknown/v0.101.0", "product_id": "CSAFPID-3787750" } }, { "category": "product_version_range", "name": "vers:unknown/v0.102.0", "product": { "name": "vers:unknown/v0.102.0", "product_id": "CSAFPID-3787751" } }, { "category": "product_version_range", "name": "vers:unknown/v0.103.0", "product": { "name": "vers:unknown/v0.103.0", "product_id": "CSAFPID-3787752" } }, { "category": "product_version_range", "name": "vers:unknown/v0.104.0", "product": { "name": "vers:unknown/v0.104.0", "product_id": "CSAFPID-3787753" } }, { "category": "product_version_range", "name": "vers:unknown/v0.105.0", "product": { "name": "vers:unknown/v0.105.0", "product_id": "CSAFPID-3787754" } }, { "category": "product_version_range", "name": "vers:unknown/v0.106.0", "product": { "name": "vers:unknown/v0.106.0", "product_id": "CSAFPID-3787755" } }, { "category": "product_version_range", "name": "vers:unknown/v0.107.0", "product": { "name": "vers:unknown/v0.107.0", "product_id": "CSAFPID-3787756" } }, { "category": "product_version_range", "name": "vers:unknown/v0.108.0", "product": { "name": "vers:unknown/v0.108.0", "product_id": "CSAFPID-3787757" } }, { "category": "product_version_range", "name": "vers:unknown/v0.109.0", "product": { "name": "vers:unknown/v0.109.0", "product_id": "CSAFPID-3787758" } }, { "category": "product_version_range", "name": "vers:unknown/v0.11.0", "product": { "name": "vers:unknown/v0.11.0", "product_id": "CSAFPID-3787759" } }, { "category": "product_version_range", "name": "vers:unknown/v0.110.0", "product": { "name": "vers:unknown/v0.110.0", "product_id": "CSAFPID-3787760" } }, { "category": "product_version_range", "name": "vers:unknown/v0.111.0", "product": { "name": "vers:unknown/v0.111.0", "product_id": "CSAFPID-3787761" } }, { "category": "product_version_range", "name": "vers:unknown/v0.112.0", "product": { "name": "vers:unknown/v0.112.0", "product_id": "CSAFPID-3787762" } }, { "category": "product_version_range", "name": "vers:unknown/v0.113.0", "product": { "name": "vers:unknown/v0.113.0", "product_id": "CSAFPID-3787763" } }, { "category": "product_version_range", "name": "vers:unknown/v0.114.0", "product": { "name": "vers:unknown/v0.114.0", "product_id": "CSAFPID-3787764" } }, { "category": "product_version_range", "name": "vers:unknown/v0.115.0", "product": { "name": "vers:unknown/v0.115.0", "product_id": "CSAFPID-3787765" } }, { "category": "product_version_range", "name": "vers:unknown/v0.116.0", "product": { "name": "vers:unknown/v0.116.0", "product_id": "CSAFPID-3787766" } }, { "category": "product_version_range", "name": "vers:unknown/v0.117.0", "product": { "name": "vers:unknown/v0.117.0", "product_id": "CSAFPID-3787767" } }, { "category": "product_version_range", "name": "vers:unknown/v0.118.0", "product": { "name": "vers:unknown/v0.118.0", "product_id": "CSAFPID-3787768" } }, { "category": "product_version_range", "name": "vers:unknown/v0.119.0", "product": { "name": "vers:unknown/v0.119.0", "product_id": "CSAFPID-3787769" } }, { "category": "product_version_range", "name": "vers:unknown/v0.12.0", "product": { "name": "vers:unknown/v0.12.0", "product_id": "CSAFPID-3787770" } }, { "category": "product_version_range", "name": "vers:unknown/v0.120.0", "product": { "name": "vers:unknown/v0.120.0", "product_id": "CSAFPID-3787771" } }, { "category": "product_version_range", "name": "vers:unknown/v0.121.0", "product": { "name": "vers:unknown/v0.121.0", "product_id": "CSAFPID-3787772" } }, { "category": "product_version_range", "name": "vers:unknown/v0.122.0", "product": { "name": "vers:unknown/v0.122.0", "product_id": "CSAFPID-3787773" } }, { "category": "product_version_range", "name": "vers:unknown/v0.123.0", "product": { "name": "vers:unknown/v0.123.0", "product_id": "CSAFPID-3787774" } }, { "category": "product_version_range", "name": "vers:unknown/v0.124.0", "product": { "name": "vers:unknown/v0.124.0", "product_id": "CSAFPID-3787775" } }, { "category": "product_version_range", "name": "vers:unknown/v0.125.0", "product": { "name": "vers:unknown/v0.125.0", "product_id": "CSAFPID-3787776" } }, { "category": "product_version_range", "name": "vers:unknown/v0.126.0", "product": { "name": "vers:unknown/v0.126.0", "product_id": "CSAFPID-3787777" } }, { "category": "product_version_range", "name": "vers:unknown/v0.127.0", "product": { "name": "vers:unknown/v0.127.0", "product_id": "CSAFPID-3787778" } }, { "category": "product_version_range", "name": "vers:unknown/v0.128.0", "product": { "name": "vers:unknown/v0.128.0", "product_id": "CSAFPID-3787779" } }, { "category": "product_version_range", "name": "vers:unknown/v0.129.0", "product": { "name": "vers:unknown/v0.129.0", "product_id": "CSAFPID-3787780" } }, { "category": "product_version_range", "name": "vers:unknown/v0.13.0", "product": { "name": "vers:unknown/v0.13.0", "product_id": "CSAFPID-3787781" } }, { "category": "product_version_range", "name": "vers:unknown/v0.130.0", "product": { "name": "vers:unknown/v0.130.0", "product_id": "CSAFPID-3787782" } }, { "category": "product_version_range", "name": "vers:unknown/v0.131.0", "product": { "name": "vers:unknown/v0.131.0", "product_id": "CSAFPID-8978171" } }, { "category": "product_version_range", "name": "vers:unknown/v0.132.0", "product": { "name": "vers:unknown/v0.132.0", "product_id": "CSAFPID-8978170" } }, { "category": "product_version_range", "name": "vers:unknown/v0.133.0", "product": { "name": "vers:unknown/v0.133.0", "product_id": "CSAFPID-8978169" } }, { "category": "product_version_range", "name": "vers:unknown/v0.134.0", "product": { "name": "vers:unknown/v0.134.0", "product_id": "CSAFPID-8978168" } }, { "category": "product_version_range", "name": "vers:unknown/v0.135.0", "product": { "name": "vers:unknown/v0.135.0", "product_id": "CSAFPID-8978167" } }, { "category": "product_version_range", "name": "vers:unknown/v0.136.0", "product": { "name": "vers:unknown/v0.136.0", "product_id": "CSAFPID-8978166" } }, { "category": "product_version_range", "name": "vers:unknown/v0.137.0", "product": { "name": "vers:unknown/v0.137.0", "product_id": "CSAFPID-8978165" } }, { "category": "product_version_range", "name": "vers:unknown/v0.138.0", "product": { "name": "vers:unknown/v0.138.0", "product_id": "CSAFPID-8978164" } }, { "category": "product_version_range", "name": "vers:unknown/v0.139.0", "product": { "name": "vers:unknown/v0.139.0", "product_id": "CSAFPID-8978163" } }, { "category": "product_version_range", "name": "vers:unknown/v0.14.0", "product": { "name": "vers:unknown/v0.14.0", "product_id": "CSAFPID-3787783" } }, { "category": "product_version_range", "name": "vers:unknown/v0.140.0", "product": { "name": "vers:unknown/v0.140.0", "product_id": "CSAFPID-8978162" } }, { "category": "product_version_range", "name": "vers:unknown/v0.141.0", "product": { "name": "vers:unknown/v0.141.0", "product_id": "CSAFPID-8978161" } }, { "category": "product_version_range", "name": "vers:unknown/v0.142.0", "product": { "name": "vers:unknown/v0.142.0", "product_id": "CSAFPID-8978160" } }, { "category": "product_version_range", "name": "vers:unknown/v0.143.0", "product": { "name": "vers:unknown/v0.143.0", "product_id": "CSAFPID-8978159" } }, { "category": "product_version_range", "name": "vers:unknown/v0.144.0", "product": { "name": "vers:unknown/v0.144.0", "product_id": "CSAFPID-9727426" } }, { "category": "product_version_range", "name": "vers:unknown/v0.15.0", "product": { "name": "vers:unknown/v0.15.0", "product_id": "CSAFPID-3787784" } }, { "category": "product_version_range", "name": "vers:unknown/v0.16.0", "product": { "name": "vers:unknown/v0.16.0", "product_id": "CSAFPID-3787785" } }, { "category": "product_version_range", "name": "vers:unknown/v0.17.0", "product": { "name": "vers:unknown/v0.17.0", "product_id": "CSAFPID-3787786" } }, { "category": "product_version_range", "name": "vers:unknown/v0.18.0", "product": { "name": "vers:unknown/v0.18.0", "product_id": "CSAFPID-3787787" } }, { "category": "product_version_range", "name": "vers:unknown/v0.19.0", "product": { "name": "vers:unknown/v0.19.0", "product_id": "CSAFPID-3787788" } }, { "category": "product_version_range", "name": "vers:unknown/v0.2.0", "product": { "name": "vers:unknown/v0.2.0", "product_id": "CSAFPID-3787789" } }, { "category": "product_version_range", "name": "vers:unknown/v0.20.0", "product": { "name": "vers:unknown/v0.20.0", "product_id": "CSAFPID-3787790" } }, { "category": "product_version_range", "name": "vers:unknown/v0.21.0", "product": { "name": "vers:unknown/v0.21.0", "product_id": "CSAFPID-3787791" } }, { "category": "product_version_range", "name": "vers:unknown/v0.22.0", "product": { "name": "vers:unknown/v0.22.0", "product_id": "CSAFPID-3787792" } }, { "category": "product_version_range", "name": "vers:unknown/v0.22.1", "product": { "name": "vers:unknown/v0.22.1", "product_id": "CSAFPID-3787793" } }, { "category": "product_version_range", "name": "vers:unknown/v0.23.0", "product": { "name": "vers:unknown/v0.23.0", "product_id": "CSAFPID-3787794" } }, { "category": "product_version_range", "name": "vers:unknown/v0.24.0", "product": { "name": "vers:unknown/v0.24.0", "product_id": "CSAFPID-3787795" } }, { "category": "product_version_range", "name": "vers:unknown/v0.25.0", "product": { "name": "vers:unknown/v0.25.0", "product_id": "CSAFPID-3787796" } }, { "category": "product_version_range", "name": "vers:unknown/v0.26.0", "product": { "name": "vers:unknown/v0.26.0", "product_id": "CSAFPID-3787797" } }, { "category": "product_version_range", "name": "vers:unknown/v0.27.0", "product": { "name": "vers:unknown/v0.27.0", "product_id": "CSAFPID-3787798" } }, { "category": "product_version_range", "name": "vers:unknown/v0.28.0", "product": { "name": "vers:unknown/v0.28.0", "product_id": "CSAFPID-3787799" } }, { "category": "product_version_range", "name": "vers:unknown/v0.29.0", "product": { "name": "vers:unknown/v0.29.0", "product_id": "CSAFPID-3787800" } }, { "category": "product_version_range", "name": "vers:unknown/v0.3.0", "product": { "name": "vers:unknown/v0.3.0", "product_id": "CSAFPID-3787801" } }, { "category": "product_version_range", "name": "vers:unknown/v0.3.1", "product": { "name": "vers:unknown/v0.3.1", "product_id": "CSAFPID-3787802" } }, { "category": "product_version_range", "name": "vers:unknown/v0.30.0", "product": { "name": "vers:unknown/v0.30.0", "product_id": "CSAFPID-3787803" } }, { "category": "product_version_range", "name": "vers:unknown/v0.31.0", "product": { "name": "vers:unknown/v0.31.0", "product_id": "CSAFPID-3787804" } }, { "category": "product_version_range", "name": "vers:unknown/v0.32.0", "product": { "name": "vers:unknown/v0.32.0", "product_id": "CSAFPID-3787805" } }, { "category": "product_version_range", "name": "vers:unknown/v0.33.0", "product": { "name": "vers:unknown/v0.33.0", "product_id": "CSAFPID-3787806" } }, { "category": "product_version_range", "name": "vers:unknown/v0.34.0", "product": { "name": "vers:unknown/v0.34.0", "product_id": "CSAFPID-3787807" } }, { "category": "product_version_range", "name": "vers:unknown/v0.35.0", "product": { "name": "vers:unknown/v0.35.0", "product_id": "CSAFPID-3787808" } }, { "category": "product_version_range", "name": "vers:unknown/v0.36.0", "product": { "name": "vers:unknown/v0.36.0", "product_id": "CSAFPID-3787809" } }, { "category": "product_version_range", "name": "vers:unknown/v0.37.0", "product": { "name": "vers:unknown/v0.37.0", "product_id": "CSAFPID-3787810" } }, { "category": "product_version_range", "name": "vers:unknown/v0.38.0", "product": { "name": "vers:unknown/v0.38.0", "product_id": "CSAFPID-3787811" } }, { "category": "product_version_range", "name": "vers:unknown/v0.39.0", "product": { "name": "vers:unknown/v0.39.0", "product_id": "CSAFPID-3787812" } }, { "category": "product_version_range", "name": "vers:unknown/v0.4.0", "product": { "name": "vers:unknown/v0.4.0", "product_id": "CSAFPID-3787813" } }, { "category": "product_version_range", "name": "vers:unknown/v0.40.0", "product": { "name": "vers:unknown/v0.40.0", "product_id": "CSAFPID-3787814" } }, { "category": "product_version_range", "name": "vers:unknown/v0.41.0", "product": { "name": "vers:unknown/v0.41.0", "product_id": "CSAFPID-3787815" } }, { "category": "product_version_range", "name": "vers:unknown/v0.42.0", "product": { "name": "vers:unknown/v0.42.0", "product_id": "CSAFPID-3787816" } }, { "category": "product_version_range", "name": "vers:unknown/v0.43.0", "product": { "name": "vers:unknown/v0.43.0", "product_id": "CSAFPID-3787817" } }, { "category": "product_version_range", "name": "vers:unknown/v0.44.0", "product": { "name": "vers:unknown/v0.44.0", "product_id": "CSAFPID-3787818" } }, { "category": "product_version_range", "name": "vers:unknown/v0.45.0", "product": { "name": "vers:unknown/v0.45.0", "product_id": "CSAFPID-3787819" } }, { "category": "product_version_range", "name": "vers:unknown/v0.45.1", "product": { "name": "vers:unknown/v0.45.1", "product_id": "CSAFPID-3787820" } }, { "category": "product_version_range", "name": "vers:unknown/v0.46.0", "product": { "name": "vers:unknown/v0.46.0", "product_id": "CSAFPID-3787821" } }, { "category": "product_version_range", "name": "vers:unknown/v0.47.0", "product": { "name": "vers:unknown/v0.47.0", "product_id": "CSAFPID-3787822" } }, { "category": "product_version_range", "name": "vers:unknown/v0.48.0", "product": { "name": "vers:unknown/v0.48.0", "product_id": "CSAFPID-3787823" } }, { "category": "product_version_range", "name": "vers:unknown/v0.49.0", "product": { "name": "vers:unknown/v0.49.0", "product_id": "CSAFPID-3787824" } }, { "category": "product_version_range", "name": "vers:unknown/v0.5.0", "product": { "name": "vers:unknown/v0.5.0", "product_id": "CSAFPID-3787825" } }, { "category": "product_version_range", "name": "vers:unknown/v0.5.1", "product": { "name": "vers:unknown/v0.5.1", "product_id": "CSAFPID-3787826" } }, { "category": "product_version_range", "name": "vers:unknown/v0.50.0", "product": { "name": "vers:unknown/v0.50.0", "product_id": "CSAFPID-3787827" } }, { "category": "product_version_range", "name": "vers:unknown/v0.51.0", "product": { "name": "vers:unknown/v0.51.0", "product_id": "CSAFPID-3787828" } }, { "category": "product_version_range", "name": "vers:unknown/v0.52.0", "product": { "name": "vers:unknown/v0.52.0", "product_id": "CSAFPID-3787829" } }, { "category": "product_version_range", "name": "vers:unknown/v0.53.0", "product": { "name": "vers:unknown/v0.53.0", "product_id": "CSAFPID-3787830" } }, { "category": "product_version_range", "name": "vers:unknown/v0.54.0", "product": { "name": "vers:unknown/v0.54.0", "product_id": "CSAFPID-3787831" } }, { "category": "product_version_range", "name": "vers:unknown/v0.55.0", "product": { "name": "vers:unknown/v0.55.0", "product_id": "CSAFPID-3787832" } }, { "category": "product_version_range", "name": "vers:unknown/v0.56.0", "product": { "name": "vers:unknown/v0.56.0", "product_id": "CSAFPID-3787833" } }, { "category": "product_version_range", "name": "vers:unknown/v0.57.0", "product": { "name": "vers:unknown/v0.57.0", "product_id": "CSAFPID-3787834" } }, { "category": "product_version_range", "name": "vers:unknown/v0.58.0", "product": { "name": "vers:unknown/v0.58.0", "product_id": "CSAFPID-3787835" } }, { "category": "product_version_range", "name": "vers:unknown/v0.59.0", "product": { "name": "vers:unknown/v0.59.0", "product_id": "CSAFPID-3787836" } }, { "category": "product_version_range", "name": "vers:unknown/v0.6.0", "product": { "name": "vers:unknown/v0.6.0", "product_id": "CSAFPID-3787837" } }, { "category": "product_version_range", "name": "vers:unknown/v0.60.0", "product": { "name": "vers:unknown/v0.60.0", "product_id": "CSAFPID-3787838" } }, { "category": "product_version_range", "name": "vers:unknown/v0.61.0", "product": { "name": "vers:unknown/v0.61.0", "product_id": "CSAFPID-3787839" } }, { "category": "product_version_range", "name": "vers:unknown/v0.62.0", "product": { "name": "vers:unknown/v0.62.0", "product_id": "CSAFPID-3787840" } }, { "category": "product_version_range", "name": "vers:unknown/v0.63.0", "product": { "name": "vers:unknown/v0.63.0", "product_id": "CSAFPID-3787841" } }, { "category": "product_version_range", "name": "vers:unknown/v0.64.0", "product": { "name": "vers:unknown/v0.64.0", "product_id": "CSAFPID-3787842" } }, { "category": "product_version_range", "name": "vers:unknown/v0.65.0", "product": { "name": "vers:unknown/v0.65.0", "product_id": "CSAFPID-3787843" } }, { "category": "product_version_range", "name": "vers:unknown/v0.66.0", "product": { "name": "vers:unknown/v0.66.0", "product_id": "CSAFPID-3787844" } }, { "category": "product_version_range", "name": "vers:unknown/v0.67.0", "product": { "name": "vers:unknown/v0.67.0", "product_id": "CSAFPID-3787845" } }, { "category": "product_version_range", "name": "vers:unknown/v0.68.0", "product": { "name": "vers:unknown/v0.68.0", "product_id": "CSAFPID-3787846" } }, { "category": "product_version_range", "name": "vers:unknown/v0.69.0", "product": { "name": "vers:unknown/v0.69.0", "product_id": "CSAFPID-3787847" } }, { "category": "product_version_range", "name": "vers:unknown/v0.7.0", "product": { "name": "vers:unknown/v0.7.0", "product_id": "CSAFPID-3787848" } }, { "category": "product_version_range", "name": "vers:unknown/v0.70.0", "product": { "name": "vers:unknown/v0.70.0", "product_id": "CSAFPID-3787849" } }, { "category": "product_version_range", "name": "vers:unknown/v0.71.0", "product": { "name": "vers:unknown/v0.71.0", "product_id": "CSAFPID-3787850" } }, { "category": "product_version_range", "name": "vers:unknown/v0.72.0", "product": { "name": "vers:unknown/v0.72.0", "product_id": "CSAFPID-3787851" } }, { "category": "product_version_range", "name": "vers:unknown/v0.73.0", "product": { "name": "vers:unknown/v0.73.0", "product_id": "CSAFPID-3787852" } }, { "category": "product_version_range", "name": "vers:unknown/v0.74.0", "product": { "name": "vers:unknown/v0.74.0", "product_id": "CSAFPID-3787853" } }, { "category": "product_version_range", "name": "vers:unknown/v0.75.0", "product": { "name": "vers:unknown/v0.75.0", "product_id": "CSAFPID-3787854" } }, { "category": "product_version_range", "name": "vers:unknown/v0.76.0", "product": { "name": "vers:unknown/v0.76.0", "product_id": "CSAFPID-3787855" } }, { "category": "product_version_range", "name": "vers:unknown/v0.77.0", "product": { "name": "vers:unknown/v0.77.0", "product_id": "CSAFPID-3787856" } }, { "category": "product_version_range", "name": "vers:unknown/v0.78.0", "product": { "name": "vers:unknown/v0.78.0", "product_id": "CSAFPID-3787857" } }, { "category": "product_version_range", "name": "vers:unknown/v0.79.0", "product": { "name": "vers:unknown/v0.79.0", "product_id": "CSAFPID-3787858" } }, { "category": "product_version_range", "name": "vers:unknown/v0.8.0", "product": { "name": "vers:unknown/v0.8.0", "product_id": "CSAFPID-3787859" } }, { "category": "product_version_range", "name": "vers:unknown/v0.80.0", "product": { "name": "vers:unknown/v0.80.0", "product_id": "CSAFPID-3787860" } }, { "category": "product_version_range", "name": "vers:unknown/v0.81.0", "product": { "name": "vers:unknown/v0.81.0", "product_id": "CSAFPID-3787861" } }, { "category": "product_version_range", "name": "vers:unknown/v0.82.0", "product": { "name": "vers:unknown/v0.82.0", "product_id": "CSAFPID-3787862" } }, { "category": "product_version_range", "name": "vers:unknown/v0.83.0", "product": { "name": "vers:unknown/v0.83.0", "product_id": "CSAFPID-3787863" } }, { "category": "product_version_range", "name": "vers:unknown/v0.84.0", "product": { "name": "vers:unknown/v0.84.0", "product_id": "CSAFPID-3787864" } }, { "category": "product_version_range", "name": "vers:unknown/v0.85.0", "product": { "name": "vers:unknown/v0.85.0", "product_id": "CSAFPID-3787865" } }, { "category": "product_version_range", "name": "vers:unknown/v0.86.0", "product": { "name": "vers:unknown/v0.86.0", "product_id": "CSAFPID-3787866" } }, { "category": "product_version_range", "name": "vers:unknown/v0.87.0", "product": { "name": "vers:unknown/v0.87.0", "product_id": "CSAFPID-3787867" } }, { "category": "product_version_range", "name": "vers:unknown/v0.88.0", "product": { "name": "vers:unknown/v0.88.0", "product_id": "CSAFPID-3787868" } }, { "category": "product_version_range", "name": "vers:unknown/v0.89.0", "product": { "name": "vers:unknown/v0.89.0", "product_id": "CSAFPID-3787869" } }, { "category": "product_version_range", "name": "vers:unknown/v0.9.0", "product": { "name": "vers:unknown/v0.9.0", "product_id": "CSAFPID-3787870" } }, { "category": "product_version_range", "name": "vers:unknown/v0.90.0", "product": { "name": "vers:unknown/v0.90.0", "product_id": "CSAFPID-3787871" } }, { "category": "product_version_range", "name": "vers:unknown/v0.91.0", "product": { "name": "vers:unknown/v0.91.0", "product_id": "CSAFPID-3787872" } }, { "category": "product_version_range", "name": "vers:unknown/v0.92.0", "product": { "name": "vers:unknown/v0.92.0", "product_id": "CSAFPID-3787873" } }, { "category": "product_version_range", "name": "vers:unknown/v0.93.0", "product": { "name": "vers:unknown/v0.93.0", "product_id": "CSAFPID-3787874" } }, { "category": "product_version_range", "name": "vers:unknown/v0.94.0", "product": { "name": "vers:unknown/v0.94.0", "product_id": "CSAFPID-3787875" } }, { "category": "product_version_range", "name": "vers:unknown/v0.95.0", "product": { "name": "vers:unknown/v0.95.0", "product_id": "CSAFPID-3787876" } }, { "category": "product_version_range", "name": "vers:unknown/v0.96.0", "product": { "name": "vers:unknown/v0.96.0", "product_id": "CSAFPID-3787877" } }, { "category": "product_version_range", "name": "vers:unknown/v0.97.0", "product": { "name": "vers:unknown/v0.97.0", "product_id": "CSAFPID-3787878" } }, { "category": "product_version_range", "name": "vers:unknown/v0.98.0", "product": { "name": "vers:unknown/v0.98.0", "product_id": "CSAFPID-3787879" } }, { "category": "product_version_range", "name": "vers:unknown/v0.99.0", "product": { "name": "vers:unknown/v0.99.0", "product_id": "CSAFPID-3787880" } } ], "category": "product_name", "name": "kin-openapi" } ], "category": "vendor", "name": "getkin" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-100347", "cwe": { "id": "CWE-248", "name": "Uncaught Exception" }, "notes": [ { "category": "description", "text": "A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service (DoS) by sending requests with unsupported or non-canonical HTTP methods to an existing static path. Because the application encounters an unhandled panic before authentication is evaluated, these requests terminate active connections and can cause excessive log storage consumption.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:87077" }, { "category": "description", "text": "kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3filter.ValidationHandler uses the routers/legacy router, which passes an unsupported or non-canonical HTTP method for an existing static path to openapi3.PathItem.GetOperation. The default branch of GetOperation panics before authentication runs, so an unauthenticated remote client can repeatedly send methods such as PROPFIND or lowercase get to abort connections and generate stack-trace log growth. The specific panic requires an exact static path; a concrete path matched only by a templated route does not reach the same sink. This issue is fixed in version 0.145.0.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-100347" }, { "category": "description", "text": "## Summary\nThe `openapi3filter.ValidationHandler` (the exported, documented request-validation middleware) hard-wires the legacy router (`routers/legacy`). That router matches the incoming request method verbatim against a trie built exclusively from upper-cased canonical HTTP methods. A request carrying a method token that is not one of the 9 standard methods — a legitimate-but-unsupported token such as `PROPFIND`, or a non-canonical case variant such as lowercase `get` — misses the trie, leaves `route == nil`, and for an existing **static** path falls through to `PathItem.GetOperation(method)`, whose `default:` case calls `panic(...)`. The panic fires inside route resolution, **before any authentication** runs. This is an unauthenticated, remotely triggerable denial of service (recovered per-connection panic + unbounded error-log growth).\n\n## Root Cause\n- `openapi3filter/validation_handler.go:39` — `ValidationHandler.Load()` always constructs `legacyrouter.NewRouter(doc)`; there is no alternative router option on this path.\n- `routers/legacy/router.go:109` — the request method is used verbatim (`method, url := req.Method, ...`); there is no canonicalization or rejection of unknown method tokens.\n- `routers/legacy/router.go:69-70` — the trie is populated with `strings.ToUpper(method)` keys taken from `pathItem.Operations()` (canonical `http.Method*` constants only).\n- `routers/legacy/router.go:141` — `root.Match(method + \" \" + remainingPath)` misses for a non-canonical/unsupported method → `route == nil`.\n- `routers/legacy/router.go:146-150` — in the `route == nil` block, `doc.Paths.Value(path)` returns non-nil for an existing static path, and control reaches `pathItem.GetOperation(method)`.\n- `openapi3/path_item.go:174` — `GetOperation`'s `switch method` has no matching case → `default: panic(fmt.Errorf(\"unsupported HTTP method %q\", method))`.\n\n## Impact\nAn unauthenticated attacker sends a single request with a non-standard HTTP method token to any existing static path. The handler goroutine panics; Go's `net/http` recovers the panic per connection (process survives), aborts the connection (client sees a reset / 500), and logs a full stack trace. Repeated requests cause connection churn and unbounded `http: panic serving` log growth, and the request never reaches authentication. Availability impact (A:L) under the default synchronous `ValidationHandler` middleware; on non-net/http hosts or when reached on an application goroutine the ceiling is a full crash.\n\n## Proof of Concept\nServe any spec with a static path (e.g. `/ping`) behind `openapi3filter.ValidationHandler`, then:\n```\nprintf 'PROPFIND /ping HTTP/1.1\\r\\nHost: x\\r\\n\\r\\n' | nc target 8080 # connection aborted (panic)\nprintf 'get /ping HTTP/1.1\\r\\nHost: x\\r\\n\\r\\n' | nc target 8080 # connection aborted (panic)\nprintf 'GET /ping HTTP/1.1\\r\\nHost: x\\r\\n\\r\\n' | nc target 8080 # 200 OK (process survived)\n```\nReproduced end-to-end against a real `net/http.Server` + `ValidationHandler`: `PROPFIND /ping` and lowercase `get /ping` both abort the connection with a panic at `path_item.go:174` (stack: `GetOperation` <- `legacy.FindRoute` router.go:150 <- `ValidationHandler.validateRequest` validation_handler.go:84); the process stays alive and subsequent `GET /ping` returns 200.\n\n## Attack Chain\n1. Entry: unauthenticated `PROPFIND /ping HTTP/1.1` (any known static path). Guard: net/http method validation. Bypass proof: net/http accepts any valid HTTP token as a method — `PROPFIND` and lowercase `get` both reach the handler.\n2. Route match: `legacy/router.go:141` `root.Match(\"PROPFIND /ping\")`. Guard: trie match. Bypass proof: trie holds only upper-cased canonical methods → miss → `route == nil`.\n3. `route == nil` block: `router.go:146` `doc.Paths.Value(\"/ping\")` → non-nil for an existing static path (exact map lookup). Guard: `pathItem == nil` check (l.147). Bypass proof: static path exists → not nil → proceeds.\n4. Sink: `router.go:150` `pathItem.GetOperation(\"PROPFIND\")` → `path_item.go:174` `default: panic(...)`.\n5. Impact: handler goroutine panics; net/http recovers per connection; request never reaches auth.\n\n## Bypass Evidence\n- net/http does NOT reject non-standard method tokens — confirmed empirically: `PROPFIND` and lowercase `get` both reached the handler and panicked.\n- No canonicalization/rejection exists between `FindRoute` entry and `GetOperation`; `req.Method` is used verbatim (router.go:109).\n- `git show v0.144.0:openapi3/path_item.go` shows `panic(...)` at line 174; `git show v0.144.0:routers/legacy/router.go` shows verbatim method use and the unguarded `GetOperation` call. `git log v0.144.0..HEAD` on these files is empty (no post-tag fix).\n\n## Scoping Note\nThe panic requires the request path to be an exact static (non-templated) key in the served spec. A concrete path against a `/{id}` template returns a clean 500 (not a panic), because `Paths.Value` is an exact map lookup. Static paths (`/health`, `/login`, `/version`, `/metrics`, `/ping`, `/`) are ubiquitous in real specs and discoverable from public specs/standard endpoints, so a vulnerable target almost always exists. This makes the finding arguably broader than existing panic advisories, as it needs no special spec construct — any static path suffices.\n\n## Affected Versions\n`<= 0.144.0` (present on the latest release tag v0.144.0; long-standing; no patched version).\n\n## Suggested Fix\nIn the legacy router, canonicalize/validate the request method before route resolution and return `ErrMethodNotAllowed`/`ErrPathNotFound` for unknown methods, or make `PathItem.GetOperation` return an error (nil) for unrecognized methods instead of calling `panic`.\n\n---\nReported by **zx (Jace)** — GitHub: @manus-use", "title": "github - https://github.com/advisories/GHSA-fh4f-47mf-f2gj" }, { "category": "description", "text": "A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service (DoS) by sending requests with unsupported or non-canonical HTTP methods to an existing static path. Because the application encounters an unhandled panic before authentication is evaluated, these requests terminate active connections and can cause excessive log storage consumption.", "title": "redhat - https://access.redhat.com/security/cve/CVE-2026-100347" }, { "category": "description", "text": "kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3filter.ValidationHandler uses the routers/legacy router, which passes an unsupported or non-canonical HTTP method for an existing static path to openapi3.PathItem.GetOperation. The default branch of GetOperation panics before authentication runs, so an unauthenticated remote client can repeatedly send methods such as PROPFIND or lowercase get to abort connections and generate stack-trace log growth. The specific panic requires an exact static path; a concrete path matched only by a templated route does not reach the same sink. This issue is fixed in version 0.145.0.", "title": "debian - https://security-tracker.debian.org/tracker/CVE-2026-100347" }, { "category": "description", "text": "## Summary\nThe `openapi3filter.ValidationHandler` (the exported, documented request-validation middleware) hard-wires the legacy router (`routers/legacy`). That router matches the incoming request method verbatim against a trie built exclusively from upper-cased canonical HTTP methods. A request carrying a method token that is not one of the 9 standard methods — a legitimate-but-unsupported token such as `PROPFIND`, or a non-canonical case variant such as lowercase `get` — misses the trie, leaves `route == nil`, and for an existing **static** path falls through to `PathItem.GetOperation(method)`, whose `default:` case calls `panic(...)`. The panic fires inside route resolution, **before any authentication** runs. This is an unauthenticated, remotely triggerable denial of service (recovered per-connection panic + unbounded error-log growth).\n\n## Root Cause\n- `openapi3filter/validation_handler.go:39` — `ValidationHandler.Load()` always constructs `legacyrouter.NewRouter(doc)`; there is no alternative router option on this path.\n- `routers/legacy/router.go:109` — the request method is used verbatim (`method, url := req.Method, ...`); there is no canonicalization or rejection of unknown method tokens.\n- `routers/legacy/router.go:69-70` — the trie is populated with `strings.ToUpper(method)` keys taken from `pathItem.Operations()` (canonical `http.Method*` constants only).\n- `routers/legacy/router.go:141` — `root.Match(method + \" \" + remainingPath)` misses for a non-canonical/unsupported method → `route == nil`.\n- `routers/legacy/router.go:146-150` — in the `route == nil` block, `doc.Paths.Value(path)` returns non-nil for an existing static path, and control reaches `pathItem.GetOperation(method)`.\n- `openapi3/path_item.go:174` — `GetOperation`'s `switch method` has no matching case → `default: panic(fmt.Errorf(\"unsupported HTTP method %q\", method))`.\n\n## Impact\nAn unauthenticated attacker sends a single request with a non-standard HTTP method token to any existing static path. The handler goroutine panics; Go's `net/http` recovers the panic per connection (process survives), aborts the connection (client sees a reset / 500), and logs a full stack trace. Repeated requests cause connection churn and unbounded `http: panic serving` log growth, and the request never reaches authentication. Availability impact (A:L) under the default synchronous `ValidationHandler` middleware; on non-net/http hosts or when reached on an application goroutine the ceiling is a full crash.\n\n## Proof of Concept\nServe any spec with a static path (e.g. `/ping`) behind `openapi3filter.ValidationHandler`, then:\n```\nprintf 'PROPFIND /ping HTTP/1.1\\r\\nHost: x\\r\\n\\r\\n' | nc target 8080 # connection aborted (panic)\nprintf 'get /ping HTTP/1.1\\r\\nHost: x\\r\\n\\r\\n' | nc target 8080 # connection aborted (panic)\nprintf 'GET /ping HTTP/1.1\\r\\nHost: x\\r\\n\\r\\n' | nc target 8080 # 200 OK (process survived)\n```\nReproduced end-to-end against a real `net/http.Server` + `ValidationHandler`: `PROPFIND /ping` and lowercase `get /ping` both abort the connection with a panic at `path_item.go:174` (stack: `GetOperation` <- `legacy.FindRoute` router.go:150 <- `ValidationHandler.validateRequest` validation_handler.go:84); the process stays alive and subsequent `GET /ping` returns 200.\n\n## Attack Chain\n1. Entry: unauthenticated `PROPFIND /ping HTTP/1.1` (any known static path). Guard: net/http method validation. Bypass proof: net/http accepts any valid HTTP token as a method — `PROPFIND` and lowercase `get` both reach the handler.\n2. Route match: `legacy/router.go:141` `root.Match(\"PROPFIND /ping\")`. Guard: trie match. Bypass proof: trie holds only upper-cased canonical methods → miss → `route == nil`.\n3. `route == nil` block: `router.go:146` `doc.Paths.Value(\"/ping\")` → non-nil for an existing static path (exact map lookup). Guard: `pathItem == nil` check (l.147). Bypass proof: static path exists → not nil → proceeds.\n4. Sink: `router.go:150` `pathItem.GetOperation(\"PROPFIND\")` → `path_item.go:174` `default: panic(...)`.\n5. Impact: handler goroutine panics; net/http recovers per connection; request never reaches auth.\n\n## Bypass Evidence\n- net/http does NOT reject non-standard method tokens — confirmed empirically: `PROPFIND` and lowercase `get` both reached the handler and panicked.\n- No canonicalization/rejection exists between `FindRoute` entry and `GetOperation`; `req.Method` is used verbatim (router.go:109).\n- `git show v0.144.0:openapi3/path_item.go` shows `panic(...)` at line 174; `git show v0.144.0:routers/legacy/router.go` shows verbatim method use and the unguarded `GetOperation` call. `git log v0.144.0..HEAD` on these files is empty (no post-tag fix).\n\n## Scoping Note\nThe panic requires the request path to be an exact static (non-templated) key in the served spec. A concrete path against a `/{id}` template returns a clean 500 (not a panic), because `Paths.Value` is an exact map lookup. Static paths (`/health`, `/login`, `/version`, `/metrics`, `/ping`, `/`) are ubiquitous in real specs and discoverable from public specs/standard endpoints, so a vulnerable target almost always exists. This makes the finding arguably broader than existing panic advisories, as it needs no special spec construct — any static path suffices.\n\n## Affected Versions\n`<= 0.144.0` (present on the latest release tag v0.144.0; long-standing; no patched version).\n\n## Suggested Fix\nIn the legacy router, canonicalize/validate the request method before route resolution and return `ErrMethodNotAllowed`/`ErrPathNotFound` for unknown methods, or make `PathItem.GetOperation` return an error (nil) for unrecognized methods instead of calling `panic`.\n\n---\nReported by **zx (Jace)** — GitHub: @manus-use", "title": "osvgo - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Go%2FGHSA-fh4f-47mf-f2gj.json?alt=media" }, { "category": "description", "text": "kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3filter.ValidationHandler uses the routers/legacy router, which passes an unsupported or non-canonical HTTP method for an existing static path to openapi3.PathItem.GetOperation. The default branch of GetOperation panics before authentication runs, so an unauthenticated remote client can repeatedly send methods such as PROPFIND or lowercase get to abort connections and generate stack-trace log growth. The specific panic requires an exact static path; a concrete path matched only by a templated route does not reach the same sink. This issue is fixed in version 0.145.0.", "title": "osvgit - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-100347.json?alt=media" }, { "category": "description", "text": "kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3filter.ValidationHandler uses the routers/legacy router, which passes an unsupported or non-canonical HTTP method for an existing static path to openapi3.PathItem.GetOperation. The default branch of GetOperation panics before authentication runs, so an unauthenticated remote client can repeatedly send methods such as PROPFIND or lowercase get to abort connections and generate stack-trace log growth. The specific panic requires an exact static path; a concrete path matched only by a templated route does not reach the same sink. This issue is fixed in version 0.145.0.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-100347" }, { "category": "description", "text": "A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service (DoS) by sending requests with unsupported or non-canonical HTTP methods to an existing static path. Because the application encounters an unhandled panic before authentication is evaluated, these requests terminate active connections and can cause excessive log storage consumption.", "title": "redhat - https://access.redhat.com/errata/RHSA-2026:85266" }, { "category": "other", "text": "0.00515", "title": "EPSS" }, { "category": "other", "text": "4.3", "title": "NCSC Score" }, { "category": "other", "text": "VENDOR FIX as product remediation category", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "There is product_remediation data available from source Redhat, Is related to CWE-248 (Uncaught Exception)", "title": "NCSC Score top decreasing factors" }, { "category": "details", "text": "Severity: 2\n", "title": "Vendor assessment" } ], "product_status": { "fixed": [ "CSAFPID-9764774", "CSAFPID-9821941" ], "known_affected": [ "CSAFPID-6014972", "CSAFPID-8902830", "CSAFPID-8902831", "CSAFPID-9053231", "CSAFPID-9053232", "CSAFPID-9710183", "CSAFPID-8980229", "CSAFPID-9725716", "CSAFPID-3787747", "CSAFPID-3787748", "CSAFPID-3787749", "CSAFPID-3787750", "CSAFPID-3787751", "CSAFPID-3787752", "CSAFPID-3787753", "CSAFPID-3787754", "CSAFPID-3787755", "CSAFPID-3787756", "CSAFPID-3787757", "CSAFPID-3787758", "CSAFPID-3787759", "CSAFPID-3787760", "CSAFPID-3787761", "CSAFPID-3787762", "CSAFPID-3787763", "CSAFPID-3787764", "CSAFPID-3787765", "CSAFPID-3787766", "CSAFPID-3787767", "CSAFPID-3787768", "CSAFPID-3787769", "CSAFPID-3787770", "CSAFPID-3787771", "CSAFPID-3787772", "CSAFPID-3787773", "CSAFPID-3787774", "CSAFPID-3787775", "CSAFPID-3787776", "CSAFPID-3787777", "CSAFPID-3787778", "CSAFPID-3787779", "CSAFPID-3787780", "CSAFPID-3787781", "CSAFPID-3787782", "CSAFPID-8978171", "CSAFPID-8978170", "CSAFPID-8978169", "CSAFPID-8978168", "CSAFPID-8978167", "CSAFPID-8978166", "CSAFPID-8978165", "CSAFPID-8978164", "CSAFPID-8978163", "CSAFPID-3787783", "CSAFPID-8978162", "CSAFPID-8978161", "CSAFPID-8978160", "CSAFPID-8978159", "CSAFPID-9727426", "CSAFPID-3787784", "CSAFPID-3787785", "CSAFPID-3787786", "CSAFPID-3787787", "CSAFPID-3787788", "CSAFPID-3787789", "CSAFPID-3787790", "CSAFPID-3787791", "CSAFPID-3787792", "CSAFPID-3787793", "CSAFPID-3787794", "CSAFPID-3787795", "CSAFPID-3787796", "CSAFPID-3787797", "CSAFPID-3787798", "CSAFPID-3787799", "CSAFPID-3787800", "CSAFPID-3787801", "CSAFPID-3787802", "CSAFPID-3787803", "CSAFPID-3787804", "CSAFPID-3787805", "CSAFPID-3787806", "CSAFPID-3787807", "CSAFPID-3787808", "CSAFPID-3787809", "CSAFPID-3787810", "CSAFPID-3787811", "CSAFPID-3787812", "CSAFPID-3787813", "CSAFPID-3787814", "CSAFPID-3787815", "CSAFPID-3787816", "CSAFPID-3787817", "CSAFPID-3787818", "CSAFPID-3787819", "CSAFPID-3787820", "CSAFPID-3787821", "CSAFPID-3787822", "CSAFPID-3787823", "CSAFPID-3787824", "CSAFPID-3787825", "CSAFPID-3787826", "CSAFPID-3787827", "CSAFPID-3787828", "CSAFPID-3787829", "CSAFPID-3787830", "CSAFPID-3787831", "CSAFPID-3787832", "CSAFPID-3787833", "CSAFPID-3787834", "CSAFPID-3787835", "CSAFPID-3787836", "CSAFPID-3787837", "CSAFPID-3787838", "CSAFPID-3787839", "CSAFPID-3787840", "CSAFPID-3787841", "CSAFPID-3787842", "CSAFPID-3787843", "CSAFPID-3787844", "CSAFPID-3787845", "CSAFPID-3787846", "CSAFPID-3787847", "CSAFPID-3787848", "CSAFPID-3787849", "CSAFPID-3787850", "CSAFPID-3787851", "CSAFPID-3787852", "CSAFPID-3787853", "CSAFPID-3787854", "CSAFPID-3787855", "CSAFPID-3787856", "CSAFPID-3787857", "CSAFPID-3787858", "CSAFPID-3787859", "CSAFPID-3787860", "CSAFPID-3787861", "CSAFPID-3787862", "CSAFPID-3787863", "CSAFPID-3787864", "CSAFPID-3787865", "CSAFPID-3787866", "CSAFPID-3787867", "CSAFPID-3787868", "CSAFPID-3787869", "CSAFPID-3787870", "CSAFPID-3787871", "CSAFPID-3787872", "CSAFPID-3787873", "CSAFPID-3787874", "CSAFPID-3787875", "CSAFPID-3787876", "CSAFPID-3787877", "CSAFPID-3787878", "CSAFPID-3787879", "CSAFPID-3787880", "CSAFPID-9740713" ] }, "references": [ { "category": "external", "summary": "Source - ncscclear", "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-100347" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-100347" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100347" }, { "category": "external", "summary": "Source - github", "url": "https://github.com/advisories/GHSA-fh4f-47mf-f2gj" }, { "category": "external", "summary": "Source - debian", "url": "https://security-tracker.debian.org/tracker/CVE-2026-100347" }, { "category": "external", "summary": "Source - osvgo", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Go%2FGHSA-fh4f-47mf-f2gj.json?alt=media" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-100347.json?alt=media" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100347" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:85266" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:87077" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-100347" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2553580" }, { "category": "external", "summary": "Reference - redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-100347" }, { "category": "external", "summary": "Reference - github; osv; osvgo; redhat", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100347" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; osvgo; redhat", "url": "https://github.com/getkin/kin-openapi/commit/f1a5b523b82868d2d9be2e116b4e942892be72c3" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; osvgo; redhat", "url": "https://github.com/getkin/kin-openapi/releases/tag/v0.145.0" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv; osvgo; redhat", "url": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-fh4f-47mf-f2gj" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:87077" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-100348" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-100349" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-100351" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-100352" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-100353" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-100354" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-110816" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-15577" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-33374" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-93294" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-95502" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/updates/classification/" }, { "category": "external", "summary": "Reference - redhat", "url": "https://images.redhat.com/" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-92539" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_87077.json" }, { "category": "external", "summary": "Reference - github", "url": "https://github.com/advisories/GHSA-fh4f-47mf-f2gj" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/100xxx/CVE-2026-100347.json" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:85266" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-93450" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_85266.json" } ], "remediations": [ { "category": "vendor_fix", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/", "product_ids": [ "CSAFPID-9764774" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:85266" }, { "category": "vendor_fix", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/", "product_ids": [ "CSAFPID-9821941" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:87077" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "baseScore": 5.3, "baseSeverity": "MEDIUM" }, "products": [ "CSAFPID-3787747", "CSAFPID-3787748", "CSAFPID-3787749", "CSAFPID-3787750", "CSAFPID-3787751", "CSAFPID-3787752", "CSAFPID-3787753", "CSAFPID-3787754", "CSAFPID-3787755", "CSAFPID-3787756", "CSAFPID-3787757", "CSAFPID-3787758", "CSAFPID-3787759", "CSAFPID-3787760", "CSAFPID-3787761", "CSAFPID-3787762", "CSAFPID-3787763", "CSAFPID-3787764", "CSAFPID-3787765", "CSAFPID-3787766", "CSAFPID-3787767", "CSAFPID-3787768", "CSAFPID-3787769", "CSAFPID-3787770", "CSAFPID-3787771", "CSAFPID-3787772", "CSAFPID-3787773", "CSAFPID-3787774", "CSAFPID-3787775", "CSAFPID-3787776", "CSAFPID-3787777", "CSAFPID-3787778", "CSAFPID-3787779", "CSAFPID-3787780", "CSAFPID-3787781", "CSAFPID-3787782", "CSAFPID-3787783", "CSAFPID-3787784", "CSAFPID-3787785", "CSAFPID-3787786", "CSAFPID-3787787", "CSAFPID-3787788", "CSAFPID-3787789", "CSAFPID-3787790", "CSAFPID-3787791", "CSAFPID-3787792", "CSAFPID-3787793", "CSAFPID-3787794", "CSAFPID-3787795", "CSAFPID-3787796", "CSAFPID-3787797", "CSAFPID-3787798", "CSAFPID-3787799", "CSAFPID-3787800", "CSAFPID-3787801", "CSAFPID-3787802", "CSAFPID-3787803", "CSAFPID-3787804", "CSAFPID-3787805", "CSAFPID-3787806", "CSAFPID-3787807", "CSAFPID-3787808", "CSAFPID-3787809", "CSAFPID-3787810", "CSAFPID-3787811", "CSAFPID-3787812", "CSAFPID-3787813", "CSAFPID-3787814", "CSAFPID-3787815", "CSAFPID-3787816", "CSAFPID-3787817", "CSAFPID-3787818", "CSAFPID-3787819", "CSAFPID-3787820", "CSAFPID-3787821", "CSAFPID-3787822", "CSAFPID-3787823", "CSAFPID-3787824", "CSAFPID-3787825", "CSAFPID-3787826", "CSAFPID-3787827", "CSAFPID-3787828", "CSAFPID-3787829", "CSAFPID-3787830", "CSAFPID-3787831", "CSAFPID-3787832", "CSAFPID-3787833", "CSAFPID-3787834", "CSAFPID-3787835", "CSAFPID-3787836", "CSAFPID-3787837", "CSAFPID-3787838", "CSAFPID-3787839", "CSAFPID-3787840", "CSAFPID-3787841", "CSAFPID-3787842", "CSAFPID-3787843", "CSAFPID-3787844", "CSAFPID-3787845", "CSAFPID-3787846", "CSAFPID-3787847", "CSAFPID-3787848", "CSAFPID-3787849", "CSAFPID-3787850", "CSAFPID-3787851", "CSAFPID-3787852", "CSAFPID-3787853", "CSAFPID-3787854", "CSAFPID-3787855", "CSAFPID-3787856", "CSAFPID-3787857", "CSAFPID-3787858", "CSAFPID-3787859", "CSAFPID-3787860", "CSAFPID-3787861", "CSAFPID-3787862", "CSAFPID-3787863", "CSAFPID-3787864", "CSAFPID-3787865", "CSAFPID-3787866", "CSAFPID-3787867", "CSAFPID-3787868", "CSAFPID-3787869", "CSAFPID-3787870", "CSAFPID-3787871", "CSAFPID-3787872", "CSAFPID-3787873", "CSAFPID-3787874", "CSAFPID-3787875", "CSAFPID-3787876", "CSAFPID-3787877", "CSAFPID-3787878", "CSAFPID-3787879", "CSAFPID-3787880", "CSAFPID-6014972", "CSAFPID-8902830", "CSAFPID-8902831", "CSAFPID-8978159", "CSAFPID-8978160", "CSAFPID-8978161", "CSAFPID-8978162", "CSAFPID-8978163", "CSAFPID-8978164", "CSAFPID-8978165", "CSAFPID-8978166", "CSAFPID-8978167", "CSAFPID-8978168", "CSAFPID-8978169", "CSAFPID-8978170", "CSAFPID-8978171", "CSAFPID-8980229", "CSAFPID-9053231", "CSAFPID-9053232", "CSAFPID-9710183", "CSAFPID-9725716", "CSAFPID-9727426", "CSAFPID-9740713" ] } ], "title": "CVE-2026-100347" } ] }