{"schema":"vulnpedia.research/1","cve":"CVE-2026-100349","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-74vm-87hj-r66f","tags":["x_refsource_CONFIRM","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T15:50:37.453Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T15:50:37.453Z","url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-74vm-87hj-r66f"},{"source":"nvd","sourceId":"CVE-2026-100349","modified":"2026-10-16T18:17:10.350","url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-74vm-87hj-r66f"},{"source":"ghsa","sourceId":"GHSA-74vm-87hj-r66f","url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-74vm-87hj-r66f"},{"source":"ghsa","sourceId":"GHSA-74vm-87hj-r66f","modified":"2026-10-16T20:15:03.610490637Z","url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-74vm-87hj-r66f"},{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-74vm-87hj-r66f"}]},{"url":"https://github.com/getkin/kin-openapi/commit/f5441d67f855ed34d975b3b85665764644ab1459","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T15:50:37.453Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T15:50:37.453Z","url":"https://github.com/getkin/kin-openapi/commit/f5441d67f855ed34d975b3b85665764644ab1459"},{"source":"nvd","sourceId":"CVE-2026-100349","modified":"2026-10-16T18:17:10.350","url":"https://github.com/getkin/kin-openapi/commit/f5441d67f855ed34d975b3b85665764644ab1459"},{"source":"ghsa","sourceId":"GHSA-74vm-87hj-r66f","url":"https://github.com/getkin/kin-openapi/commit/f5441d67f855ed34d975b3b85665764644ab1459"},{"source":"ghsa","sourceId":"GHSA-74vm-87hj-r66f","modified":"2026-10-16T20:15:03.610490637Z","url":"https://github.com/getkin/kin-openapi/commit/f5441d67f855ed34d975b3b85665764644ab1459"},{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://github.com/getkin/kin-openapi/commit/f5441d67f855ed34d975b3b85665764644ab1459"}]},{"url":"https://github.com/getkin/kin-openapi/releases/tag/v0.146.0","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T15:50:37.453Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T15:50:37.453Z","url":"https://github.com/getkin/kin-openapi/releases/tag/v0.146.0"},{"source":"nvd","sourceId":"CVE-2026-100349","modified":"2026-10-16T18:17:10.350","url":"https://github.com/getkin/kin-openapi/releases/tag/v0.146.0"},{"source":"ghsa","sourceId":"GHSA-74vm-87hj-r66f","url":"https://github.com/getkin/kin-openapi/releases/tag/v0.146.0"},{"source":"ghsa","sourceId":"GHSA-74vm-87hj-r66f","modified":"2026-10-16T20:15:03.610490637Z","url":"https://github.com/getkin/kin-openapi/releases/tag/v0.146.0"},{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://github.com/getkin/kin-openapi/releases/tag/v0.146.0"}]},{"url":"https://osv.dev/vulnerability/GHSA-74vm-87hj-r66f","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-74vm-87hj-r66f","modified":"2026-10-16T20:15:03.610490637Z","origins":[{"source":"ghsa","sourceId":"GHSA-74vm-87hj-r66f","url":"https://osv.dev/vulnerability/GHSA-74vm-87hj-r66f"},{"source":"ghsa","sourceId":"GHSA-74vm-87hj-r66f","modified":"2026-10-16T20:15:03.610490637Z","url":"https://osv.dev/vulnerability/GHSA-74vm-87hj-r66f"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100349","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-74vm-87hj-r66f","modified":"2026-10-16T20:15:03.610490637Z","origins":[{"source":"ghsa","sourceId":"GHSA-74vm-87hj-r66f","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100349"},{"source":"ghsa","sourceId":"GHSA-74vm-87hj-r66f","modified":"2026-10-16T20:15:03.610490637Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100349"},{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100349"}]},{"url":"https://github.com/getkin/kin-openapi","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-74vm-87hj-r66f","modified":"2026-10-16T20:15:03.610490637Z","origins":[{"source":"ghsa","sourceId":"GHSA-74vm-87hj-r66f","url":"https://github.com/getkin/kin-openapi"},{"source":"ghsa","sourceId":"GHSA-74vm-87hj-r66f","modified":"2026-10-16T20:15:03.610490637Z","url":"https://github.com/getkin/kin-openapi"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-100349","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-100349"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553589","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553589"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-100349","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-100349"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:76677","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://access.redhat.com/errata/RHSA-2026:76677"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:87077","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://access.redhat.com/errata/RHSA-2026:87077"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:85266","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://access.redhat.com/errata/RHSA-2026:85266"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:82637","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://access.redhat.com/errata/RHSA-2026:82637"}]},{"source":"euvd","sourceId":"EUVD-2026-102159","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102159","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-102159","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102159"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-74vm-87hj-r66f","url":"https://osv.dev/vulnerability/GHSA-74vm-87hj-r66f","ecosystem":"Go","name":"github.com/getkin/kin-openapi","purl":"pkg:golang/github.com/getkin/kin-openapi","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.146.0"}]}],"databaseSpecific":{"last_known_affected_version_range":"<= 0.145.0","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-74vm-87hj-r66f/GHSA-74vm-87hj-r66f.json"},"modified":"2026-10-16T20:15:03.610490637Z","origins":[{"source":"ghsa","sourceId":"GHSA-74vm-87hj-r66f","modified":"2026-10-16T20:15:03.610490637Z","url":"https://osv.dev/vulnerability/GHSA-74vm-87hj-r66f"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json","productId":"Red Hat Hardened Images:grafana12.4-0:12.4.12-0.4.hum1@aarch64","product":"grafana12.4-0:12.4.12-0.4.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:76677"}],"purl":"pkg:rpm/redhat/grafana12.4@12.4.12-0.4.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json"}]},{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json","productId":"Red Hat Hardened Images:grafana12.4-0:12.4.12-0.4.hum1@src","product":"grafana12.4-0:12.4.12-0.4.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:76677"}],"purl":"pkg:rpm/redhat/grafana12.4@12.4.12-0.4.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json"}]},{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json","productId":"Red Hat Hardened Images:grafana12.4-0:12.4.12-0.4.hum1@x86_64","product":"grafana12.4-0:12.4.12-0.4.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:76677"}],"purl":"pkg:rpm/redhat/grafana12.4@12.4.12-0.4.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json"}]},{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json","productId":"Red Hat Hardened Images:grafana13.1-0:13.1.8-0.3.hum1@aarch64","product":"grafana13.1-0:13.1.8-0.3.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:87077"}],"purl":"pkg:rpm/redhat/grafana13.1@13.1.8-0.3.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json"}]},{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json","productId":"Red Hat Hardened Images:grafana13.1-0:13.1.8-0.3.hum1@s390x","product":"grafana13.1-0:13.1.8-0.3.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:87077"}],"purl":"pkg:rpm/redhat/grafana13.1@13.1.8-0.3.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json"}]},{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json","productId":"Red Hat Hardened Images:grafana13.1-0:13.1.8-0.3.hum1@src","product":"grafana13.1-0:13.1.8-0.3.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:87077"}],"purl":"pkg:rpm/redhat/grafana13.1@13.1.8-0.3.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json"}]},{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json","productId":"Red Hat Hardened Images:grafana13.1-0:13.1.8-0.3.hum1@x86_64","product":"grafana13.1-0:13.1.8-0.3.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:87077"}],"purl":"pkg:rpm/redhat/grafana13.1@13.1.8-0.3.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json"}]},{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json","productId":"Red Hat Hardened Images:grafana13.2-0:13.2.3-0.3.hum1@aarch64","product":"grafana13.2-0:13.2.3-0.3.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:85266"}],"purl":"pkg:rpm/redhat/grafana13.2@13.2.3-0.3.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json"}]},{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json","productId":"Red Hat Hardened Images:grafana13.2-0:13.2.3-0.3.hum1@s390x","product":"grafana13.2-0:13.2.3-0.3.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:85266"}],"purl":"pkg:rpm/redhat/grafana13.2@13.2.3-0.3.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json"}]},{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json","productId":"Red Hat Hardened Images:grafana13.2-0:13.2.3-0.3.hum1@src","product":"grafana13.2-0:13.2.3-0.3.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:85266"}],"purl":"pkg:rpm/redhat/grafana13.2@13.2.3-0.3.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json"}]},{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json","productId":"Red Hat Hardened Images:grafana13.2-0:13.2.3-0.3.hum1@x86_64","product":"grafana13.2-0:13.2.3-0.3.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:85266"}],"purl":"pkg:rpm/redhat/grafana13.2@13.2.3-0.3.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json"}]},{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json","productId":"Red Hat Hardened Images:hugo-0:0.168.0-0.1.hum1@aarch64","product":"hugo-0:0.168.0-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:82637"}],"purl":"pkg:rpm/redhat/hugo@0.168.0-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json"}]},{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json","productId":"Red Hat Hardened Images:hugo-0:0.168.0-0.1.hum1@s390x","product":"hugo-0:0.168.0-0.1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:82637"}],"purl":"pkg:rpm/redhat/hugo@0.168.0-0.1.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json"}]},{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json","productId":"Red Hat Hardened Images:hugo-0:0.168.0-0.1.hum1@src","product":"hugo-0:0.168.0-0.1.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:82637"}],"purl":"pkg:rpm/redhat/hugo@0.168.0-0.1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json"}]},{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json","productId":"Red Hat Hardened Images:hugo-0:0.168.0-0.1.hum1@x86_64","product":"hugo-0:0.168.0-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:82637"}],"purl":"pkg:rpm/redhat/hugo@0.168.0-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json"}]},{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json","productId":"red_hat_hardened_images:go-fdo-server.src","product":"go-fdo-server.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/go-fdo-server@1.0.2-1.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-100349","modified":"2026-10-21T19:15:41+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100349.json"}]}],"vendorCoverage":{"total":16,"shown":16,"omitted":0,"source":"redhat"}}