RHSA-2026:85266HighCVSS 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published
October 19, 2026
Last Modified
October 21, 2026

🔗 CVE IDs covered (9)

CVE-2026-100347 →CVE-2026-100349 →CVE-2026-100351 →CVE-2026-100353 →CVE-2026-100354 →CVE-2026-110816 →CVE-2026-100348 →CVE-2026-100352 →CVE-2026-93450 →

📋 Description

CVE-2026-93450 — github.com/go-openapi/swag: go-openapi/swag: Denial of Service via uncontrolled JSON recursion CVE-2026-100347 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unsupported HTTP methods on static paths CVE-2026-100348 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via self-referential schema definitions CVE-2026-100349 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil pointer dereference in response validation CVE-2026-100351 — github.com/getkin/kin-openapi: kin-openapi: Authentication bypass via URL path decoding discrepancy CVE-2026-100352 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via improper handling of non-finite numeric values CVE-2026-100353 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in request decoding CVE-2026-100354 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unbounded recursion during schema validation CVE-2026-110816 — qs: qs: Denial of Service via unhandled exception during array serialization

🎯 Affected products5

  • Red Hat Hardened Images
  • grafana13.2-0:13.2.3-0.3.hum1@aarch64 as a component of Red Hat Hardened Images
  • grafana13.2-0:13.2.3-0.3.hum1@s390x as a component of Red Hat Hardened Images
  • grafana13.2-0:13.2.3-0.3.hum1@src as a component of Red Hat Hardened Images
  • grafana13.2-0:13.2.3-0.3.hum1@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/

🔗 References (13)