{"schema":"vulnpedia.research/1","cve":"CVE-2026-89090","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/aws/aws-sdk-go-v2/security/advisories/GHSA-xmrv-pmrh-hhx2","tags":["third-party-advisory","WEB","ADVISORY","vendor-reference"],"source":"mitre","sourceId":"AMZN","modified":"2026-09-24T19:29:25.970Z","origins":[{"source":"mitre","sourceId":"AMZN","modified":"2026-09-24T19:29:25.970Z","url":"https://github.com/aws/aws-sdk-go-v2/security/advisories/GHSA-xmrv-pmrh-hhx2"},{"source":"nvd","sourceId":"CVE-2026-89090","modified":"2026-09-11T20:19:22.680","url":"https://github.com/aws/aws-sdk-go-v2/security/advisories/GHSA-xmrv-pmrh-hhx2"},{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","url":"https://github.com/aws/aws-sdk-go-v2/security/advisories/GHSA-xmrv-pmrh-hhx2"},{"source":"go","sourceId":"GO-2026-5764","url":"https://github.com/aws/aws-sdk-go-v2/security/advisories/GHSA-xmrv-pmrh-hhx2"},{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","modified":"2026-09-12T04:10:37.759930105Z","url":"https://github.com/aws/aws-sdk-go-v2/security/advisories/GHSA-xmrv-pmrh-hhx2"},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://github.com/aws/aws-sdk-go-v2/security/advisories/GHSA-xmrv-pmrh-hhx2"}]},{"url":"https://github.com/aws/aws-sdk-go-v2/releases/tag/release-2026-03-23","tags":["patch","WEB","vendor-reference"],"source":"mitre","sourceId":"AMZN","modified":"2026-09-24T19:29:25.970Z","origins":[{"source":"mitre","sourceId":"AMZN","modified":"2026-09-24T19:29:25.970Z","url":"https://github.com/aws/aws-sdk-go-v2/releases/tag/release-2026-03-23"},{"source":"nvd","sourceId":"CVE-2026-89090","modified":"2026-09-11T20:19:22.680","url":"https://github.com/aws/aws-sdk-go-v2/releases/tag/release-2026-03-23"},{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","url":"https://github.com/aws/aws-sdk-go-v2/releases/tag/release-2026-03-23"},{"source":"go","sourceId":"GO-2026-5764","url":"https://github.com/aws/aws-sdk-go-v2/releases/tag/release-2026-03-23"},{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","modified":"2026-09-12T04:10:37.759930105Z","url":"https://github.com/aws/aws-sdk-go-v2/releases/tag/release-2026-03-23"},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://github.com/aws/aws-sdk-go-v2/releases/tag/release-2026-03-23"}]},{"url":"https://aws.amazon.com/security/security-bulletins/2026-110-aws/","tags":["vendor-advisory","vendor-reference"],"source":"mitre","sourceId":"AMZN","modified":"2026-09-24T19:29:25.970Z","origins":[{"source":"mitre","sourceId":"AMZN","modified":"2026-09-24T19:29:25.970Z","url":"https://aws.amazon.com/security/security-bulletins/2026-110-aws/"},{"source":"nvd","sourceId":"CVE-2026-89090","modified":"2026-09-11T20:19:22.680","url":"https://aws.amazon.com/security/security-bulletins/2026-110-aws/"},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://aws.amazon.com/security/security-bulletins/2026-110-aws/"}]},{"url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2"},{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2"}]},{"url":"https://github.com/aws/aws-sdk-go-v2","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","url":"https://github.com/aws/aws-sdk-go-v2"},{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","modified":"2026-09-12T04:10:37.759930105Z","url":"https://github.com/aws/aws-sdk-go-v2"}]},{"url":"https://osv.dev/vulnerability/GO-2026-5764","tags":["ADVISORY"],"source":"go","sourceId":"GO-2026-5764","modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"go","sourceId":"GO-2026-5764","url":"https://osv.dev/vulnerability/GO-2026-5764"},{"source":"go","sourceId":"GO-2026-5764","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GO-2026-5764"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-89090","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-89090"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2531982","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2531982"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-89090","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-89090"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89090","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89090"}]},{"source":"euvd","sourceId":"EUVD-2026-76157","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-76157","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-76157","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-76157"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.7.8"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-xmrv-pmrh-hhx2/GHSA-xmrv-pmrh-hhx2.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2"}]},{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/bedrockagentcore","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/bedrockagentcore","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.15.2"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-xmrv-pmrh-hhx2/GHSA-xmrv-pmrh-hhx2.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2"}]},{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.51.8"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-xmrv-pmrh-hhx2/GHSA-xmrv-pmrh-hhx2.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2"}]},{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/bedrockruntime","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/bedrockruntime","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.50.4"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-xmrv-pmrh-hhx2/GHSA-xmrv-pmrh-hhx2.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2"}]},{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.65.0"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-xmrv-pmrh-hhx2/GHSA-xmrv-pmrh-hhx2.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2"}]},{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/iotsitewise","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/iotsitewise","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.52.19"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-xmrv-pmrh-hhx2/GHSA-xmrv-pmrh-hhx2.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2"}]},{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/kinesis","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/kinesis","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.43.5"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-xmrv-pmrh-hhx2/GHSA-xmrv-pmrh-hhx2.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2"}]},{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/lambda","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/lambda","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.88.5"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-xmrv-pmrh-hhx2/GHSA-xmrv-pmrh-hhx2.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2"}]},{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/lexruntimev2","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/lexruntimev2","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.35.15"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-xmrv-pmrh-hhx2/GHSA-xmrv-pmrh-hhx2.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2"}]},{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/s3","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.97.3"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-xmrv-pmrh-hhx2/GHSA-xmrv-pmrh-hhx2.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2"}]},{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/sagemakerruntime","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sagemakerruntime","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.39.6"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-xmrv-pmrh-hhx2/GHSA-xmrv-pmrh-hhx2.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2"}]},{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/transcribestreaming","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/transcribestreaming","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.34.5"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-xmrv-pmrh-hhx2/GHSA-xmrv-pmrh-hhx2.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"ghsa","sourceId":"GHSA-xmrv-pmrh-hhx2","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GHSA-xmrv-pmrh-hhx2"}]},{"source":"go","sourceId":"GO-2026-5764","url":"https://osv.dev/vulnerability/GO-2026-5764","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.7.8"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-5764.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"go","sourceId":"GO-2026-5764","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GO-2026-5764"}]},{"source":"go","sourceId":"GO-2026-5764","url":"https://osv.dev/vulnerability/GO-2026-5764","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/bedrockagentcore","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/bedrockagentcore","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.15.2"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-5764.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"go","sourceId":"GO-2026-5764","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GO-2026-5764"}]},{"source":"go","sourceId":"GO-2026-5764","url":"https://osv.dev/vulnerability/GO-2026-5764","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.51.8"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-5764.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"go","sourceId":"GO-2026-5764","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GO-2026-5764"}]},{"source":"go","sourceId":"GO-2026-5764","url":"https://osv.dev/vulnerability/GO-2026-5764","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/bedrockruntime","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/bedrockruntime","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.50.4"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-5764.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"go","sourceId":"GO-2026-5764","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GO-2026-5764"}]},{"source":"go","sourceId":"GO-2026-5764","url":"https://osv.dev/vulnerability/GO-2026-5764","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.65.0"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-5764.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"go","sourceId":"GO-2026-5764","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GO-2026-5764"}]},{"source":"go","sourceId":"GO-2026-5764","url":"https://osv.dev/vulnerability/GO-2026-5764","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/iotsitewise","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/iotsitewise","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.52.19"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-5764.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"go","sourceId":"GO-2026-5764","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GO-2026-5764"}]},{"source":"go","sourceId":"GO-2026-5764","url":"https://osv.dev/vulnerability/GO-2026-5764","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/kinesis","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/kinesis","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.43.5"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-5764.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"go","sourceId":"GO-2026-5764","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GO-2026-5764"}]},{"source":"go","sourceId":"GO-2026-5764","url":"https://osv.dev/vulnerability/GO-2026-5764","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/lambda","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/lambda","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.88.5"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-5764.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"go","sourceId":"GO-2026-5764","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GO-2026-5764"}]},{"source":"go","sourceId":"GO-2026-5764","url":"https://osv.dev/vulnerability/GO-2026-5764","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/lexruntimev2","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/lexruntimev2","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.35.15"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-5764.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"go","sourceId":"GO-2026-5764","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GO-2026-5764"}]},{"source":"go","sourceId":"GO-2026-5764","url":"https://osv.dev/vulnerability/GO-2026-5764","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/s3","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.97.3"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-5764.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"go","sourceId":"GO-2026-5764","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GO-2026-5764"}]},{"source":"go","sourceId":"GO-2026-5764","url":"https://osv.dev/vulnerability/GO-2026-5764","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/sagemakerruntime","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/sagemakerruntime","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.39.6"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-5764.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"go","sourceId":"GO-2026-5764","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GO-2026-5764"}]},{"source":"go","sourceId":"GO-2026-5764","url":"https://osv.dev/vulnerability/GO-2026-5764","ecosystem":"Go","name":"github.com/aws/aws-sdk-go-v2/service/transcribestreaming","purl":"pkg:golang/github.com/aws/aws-sdk-go-v2/service/transcribestreaming","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.34.5"}]}],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://vuln.go.dev/ID/GO-2026-5764.json"},"modified":"2026-09-12T04:10:37.759930105Z","origins":[{"source":"go","sourceId":"GO-2026-5764","modified":"2026-09-12T04:10:37.759930105Z","url":"https://osv.dev/vulnerability/GO-2026-5764"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"aws_load_balancer_operator:albo/aws-load-balancer-rhel8-operator","product":"albo/aws-load-balancer-rhel8-operator as a component of AWS Load Balancer Operator","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade affected AWS SDK for Go v2 modules to the fixed releases published after 2026-03-23. There is no documented workaround."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:oci/aws-load-balancer-rhel8-operator?repository_url=registry.redhat.io/albo/aws-load-balancer-rhel8-operator","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"file_integrity_operator:compliance/openshift-file-integrity-rhel8-operator","product":"compliance/openshift-file-integrity-rhel8-operator as a component of File Integrity Operator","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade affected AWS SDK for Go v2 modules to the fixed releases published after 2026-03-23. There is no documented workaround."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/openshift-file-integrity-rhel8-operator?repository_url=registry.redhat.io/compliance/openshift-file-integrity-rhel8-operator","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"openshift_api_for_data_protection:oadp/oadp-velero-rhel9","product":"oadp/oadp-velero-rhel9 as a component of OpenShift API for Data Protection","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade affected AWS SDK for Go v2 modules to the fixed releases published after 2026-03-23. There is no documented workaround."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/oadp-velero-rhel9?repository_url=registry.redhat.io/oadp/oadp-velero-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"openshift_serverless:openshift-serverless-1/kn-serving-controller-rhel9","product":"openshift-serverless-1/kn-serving-controller-rhel9 as a component of OpenShift Serverless","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade affected AWS SDK for Go v2 modules to the fixed releases published after 2026-03-23. There is no documented workaround."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/kn-serving-controller-rhel9?repository_url=registry.redhat.io/openshift-serverless-1/kn-serving-controller-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_advanced_cluster_security_4:advanced-cluster-security/rhacs-main-rhel8","product":"advanced-cluster-security/rhacs-main-rhel8 as a component of Red Hat Advanced Cluster Security 4","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade affected AWS SDK for Go v2 modules to the fixed releases published after 2026-03-23. There is no documented workaround."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/rhacs-main-rhel8?repository_url=registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_ceph_storage_9:ceph.src","product":"ceph.src as a component of Red Hat Ceph Storage 9","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade affected AWS SDK for Go v2 modules to the fixed releases published after 2026-03-23. There is no documented workaround."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/ceph?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_edge_manager_1:flightctl.src","product":"flightctl.src as a component of Red Hat Edge Manager 1","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade affected AWS SDK for Go v2 modules to the fixed releases published after 2026-03-23. There is no documented workaround."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/flightctl@1.2.0-1.el10?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_enterprise_linux_10:butane.src","product":"butane.src as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade affected AWS SDK for Go v2 modules to the fixed releases published after 2026-03-23. There is no documented workaround."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/butane@0.29.0-1.el10?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_enterprise_linux_9:osbuild-composer","product":"osbuild-composer as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade affected AWS SDK for Go v2 modules to the fixed releases published after 2026-03-23. There is no documented workaround."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/osbuild-composer","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-api-server-v2-rhel9","product":"rhoai/odh-ml-pipelines-api-server-v2-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade affected AWS SDK for Go v2 modules to the fixed releases published after 2026-03-23. There is no documented workaround."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-ml-pipelines-api-server-v2-rhel9?repository_url=registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","product":"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade affected AWS SDK for Go v2 modules to the fixed releases published after 2026-03-23. There is no documented workaround."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_openshift_container_platform_4:openshift4/ose-agent-installer-api-server-rhel9","product":"openshift4/ose-agent-installer-api-server-rhel9 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade affected AWS SDK for Go v2 modules to the fixed releases published after 2026-03-23. There is no documented workaround."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/ose-agent-installer-api-server-rhel9?repository_url=registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_openshift_container_platform_4:openshift4/ose-kube-state-metrics-rhel9","product":"openshift4/ose-kube-state-metrics-rhel9 as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade affected AWS SDK for Go v2 modules to the fixed releases published after 2026-03-23. There is no documented workaround."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/ose-kube-state-metrics-rhel9?repository_url=registry.redhat.io/openshift4/ose-kube-state-metrics-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_openshift_container_platform_4:ose-aws-ecr-image-credential-provider.src","product":"ose-aws-ecr-image-credential-provider.src as a component of Red Hat OpenShift Container Platform 4","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade affected AWS SDK for Go v2 modules to the fixed releases published after 2026-03-23. There is no documented workaround."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/ose-aws-ecr-image-credential-provider?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_openstack_platform_18.0:rhoso-operators/openstack-operator-bundle","product":"rhoso-operators/openstack-operator-bundle as a component of Red Hat OpenStack Platform 18.0","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade affected AWS SDK for Go v2 modules to the fixed releases published after 2026-03-23. There is no documented workaround."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/openstack-operator-bundle?repository_url=registry.redhat.io/rhoso-operators/openstack-operator-bundle","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"zero_trust_workload_identity_manager_-_tech_preview:zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9","product":"zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9 as a component of Zero Trust Workload Identity Manager - Tech Preview","status":"known_affected","remediations":[{"category":"workaround","details":"Upgrade affected AWS SDK for Go v2 modules to the fixed releases published after 2026-03-23. There is no documented workaround."},{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:oci/zero-trust-workload-identity-manager-rhel9?repository_url=registry.redhat.io/zero-trust-workload-identity-manager/zero-trust-workload-identity-manager-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_hardened_images:cosign.src","product":"cosign.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/cosign@3.1.3-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_hardened_images:grafana12.4.src","product":"grafana12.4.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/grafana12.4@12.4.10-0.2.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_hardened_images:grafana13.1.src","product":"grafana13.1.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/grafana13.1@13.1.3-0.8.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_hardened_images:grype.src","product":"grype.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/grype@0.118.0-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_hardened_images:hugo.src","product":"hugo.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/hugo@0.166.0-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_hardened_images:kube-state-metrics.src","product":"kube-state-metrics.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/kube-state-metrics@2.20.0-0.2.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_hardened_images:loki3.6.src","product":"loki3.6.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/loki3.6@3.6.16-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_hardened_images:opentelemetry-collector-contrib.src","product":"opentelemetry-collector-contrib.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/opentelemetry-collector-contrib@0.160.0-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_hardened_images:opentelemetry-collector-k8s.src","product":"opentelemetry-collector-k8s.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/opentelemetry-collector-k8s@0.160.0-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_hardened_images:opentofu1.10.src","product":"opentofu1.10.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/opentofu1.10@1.10.10-0.3.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_hardened_images:opentofu1.12.src","product":"opentofu1.12.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/opentofu1.12@1.12.6-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_hardened_images:rekor.src","product":"rekor.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/rekor@1.5.4-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_hardened_images:spire1.14.src","product":"spire1.14.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/spire1.14@1.14.7-0.4.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_hardened_images:syft.src","product":"syft.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/syft@1.51.1-0.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_hardened_images:tempo2.10.src","product":"tempo2.10.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/tempo2.10@2.10.8-0.2.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]},{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json","productId":"red_hat_hardened_images:trivy.src","product":"trivy.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:rpm/redhat/trivy@0.74.0-0.2.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-89090","modified":"2026-10-15T11:24:12+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89090.json"}]}],"vendorCoverage":{"total":405,"shown":32,"omitted":373,"source":"redhat"}}