RHSA-2026:82637HighCVSS 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
October 14, 2026
Last Modified
October 21, 2026

🔗 CVE IDs covered (9)

CVE-2026-100353 →CVE-2026-100354 →CVE-2026-100347 →CVE-2026-100349 →CVE-2026-100350 →CVE-2026-100351 →CVE-2026-100352 →CVE-2026-97394 →CVE-2026-100348 →

📋 Description

CVE-2026-97394 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in openapi3filter CVE-2026-100347 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unsupported HTTP methods on static paths CVE-2026-100348 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via self-referential schema definitions CVE-2026-100349 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil pointer dereference in response validation CVE-2026-100350 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via redundant regular expression compilation in query parameter decoding CVE-2026-100351 — github.com/getkin/kin-openapi: kin-openapi: Authentication bypass via URL path decoding discrepancy CVE-2026-100352 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via improper handling of non-finite numeric values CVE-2026-100353 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in request decoding CVE-2026-100354 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unbounded recursion during schema validation

🎯 Affected products5

  • Red Hat Hardened Images
  • hugo-0:0.168.0-0.1.hum1@aarch64 as a component of Red Hat Hardened Images
  • hugo-0:0.168.0-0.1.hum1@s390x as a component of Red Hat Hardened Images
  • hugo-0:0.168.0-0.1.hum1@src as a component of Red Hat Hardened Images
  • hugo-0:0.168.0-0.1.hum1@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/

🔗 References (13)