{"schema":"vulnpedia.research/1","cve":"CVE-2026-97394","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-p6wj-qrr4-pgh5","tags":["x_refsource_CONFIRM","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T15:29:05.238Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T15:29:05.238Z","url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-p6wj-qrr4-pgh5"},{"source":"nvd","sourceId":"CVE-2026-97394","modified":"2026-10-20T03:17:17.587","url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-p6wj-qrr4-pgh5"},{"source":"ghsa","sourceId":"GHSA-p6wj-qrr4-pgh5","url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-p6wj-qrr4-pgh5"},{"source":"ghsa","sourceId":"GHSA-p6wj-qrr4-pgh5","modified":"2026-10-21T03:11:56.394072112Z","url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-p6wj-qrr4-pgh5"},{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-p6wj-qrr4-pgh5"}]},{"url":"https://github.com/getkin/kin-openapi/commit/30e292371a89ca6d1f91a9553e0aa518b49f838d","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T15:29:05.238Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T15:29:05.238Z","url":"https://github.com/getkin/kin-openapi/commit/30e292371a89ca6d1f91a9553e0aa518b49f838d"},{"source":"nvd","sourceId":"CVE-2026-97394","modified":"2026-10-20T03:17:17.587","url":"https://github.com/getkin/kin-openapi/commit/30e292371a89ca6d1f91a9553e0aa518b49f838d"},{"source":"ghsa","sourceId":"GHSA-p6wj-qrr4-pgh5","url":"https://github.com/getkin/kin-openapi/commit/30e292371a89ca6d1f91a9553e0aa518b49f838d"},{"source":"ghsa","sourceId":"GHSA-p6wj-qrr4-pgh5","modified":"2026-10-21T03:11:56.394072112Z","url":"https://github.com/getkin/kin-openapi/commit/30e292371a89ca6d1f91a9553e0aa518b49f838d"},{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://github.com/getkin/kin-openapi/commit/30e292371a89ca6d1f91a9553e0aa518b49f838d"}]},{"url":"https://github.com/getkin/kin-openapi/releases/tag/v0.143.0","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T15:29:05.238Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T15:29:05.238Z","url":"https://github.com/getkin/kin-openapi/releases/tag/v0.143.0"},{"source":"nvd","sourceId":"CVE-2026-97394","modified":"2026-10-20T03:17:17.587","url":"https://github.com/getkin/kin-openapi/releases/tag/v0.143.0"},{"source":"ghsa","sourceId":"GHSA-p6wj-qrr4-pgh5","url":"https://github.com/getkin/kin-openapi/releases/tag/v0.143.0"},{"source":"ghsa","sourceId":"GHSA-p6wj-qrr4-pgh5","modified":"2026-10-21T03:11:56.394072112Z","url":"https://github.com/getkin/kin-openapi/releases/tag/v0.143.0"},{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://github.com/getkin/kin-openapi/releases/tag/v0.143.0"}]},{"url":"https://github.com/opnsense/core/security/advisories/GHSA-26cj-h9rj-g5pf","tags":["exploit"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-20T02:45:09.805Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-20T02:45:09.805Z","url":"https://github.com/opnsense/core/security/advisories/GHSA-26cj-h9rj-g5pf"},{"source":"nvd","sourceId":"CVE-2026-97394","modified":"2026-10-20T03:17:17.587","url":"https://github.com/opnsense/core/security/advisories/GHSA-26cj-h9rj-g5pf"}]},{"url":"https://osv.dev/vulnerability/GHSA-p6wj-qrr4-pgh5","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-p6wj-qrr4-pgh5","modified":"2026-10-21T03:11:56.394072112Z","origins":[{"source":"ghsa","sourceId":"GHSA-p6wj-qrr4-pgh5","url":"https://osv.dev/vulnerability/GHSA-p6wj-qrr4-pgh5"},{"source":"ghsa","sourceId":"GHSA-p6wj-qrr4-pgh5","modified":"2026-10-21T03:11:56.394072112Z","url":"https://osv.dev/vulnerability/GHSA-p6wj-qrr4-pgh5"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97394","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-p6wj-qrr4-pgh5","modified":"2026-10-21T03:11:56.394072112Z","origins":[{"source":"ghsa","sourceId":"GHSA-p6wj-qrr4-pgh5","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97394"},{"source":"ghsa","sourceId":"GHSA-p6wj-qrr4-pgh5","modified":"2026-10-21T03:11:56.394072112Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97394"},{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97394"}]},{"url":"https://github.com/getkin/kin-openapi","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-p6wj-qrr4-pgh5","modified":"2026-10-21T03:11:56.394072112Z","origins":[{"source":"ghsa","sourceId":"GHSA-p6wj-qrr4-pgh5","url":"https://github.com/getkin/kin-openapi"},{"source":"ghsa","sourceId":"GHSA-p6wj-qrr4-pgh5","modified":"2026-10-21T03:11:56.394072112Z","url":"https://github.com/getkin/kin-openapi"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-97394","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-97394"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553575","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553575"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-97394","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-97394"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:76677","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://access.redhat.com/errata/RHSA-2026:76677"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:76448","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://access.redhat.com/errata/RHSA-2026:76448"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:76430","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://access.redhat.com/errata/RHSA-2026:76430"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:82637","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://access.redhat.com/errata/RHSA-2026:82637"}]},{"source":"euvd","sourceId":"EUVD-2026-102143","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102143","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-102143","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102143"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-p6wj-qrr4-pgh5","url":"https://osv.dev/vulnerability/GHSA-p6wj-qrr4-pgh5","ecosystem":"Go","name":"github.com/getkin/kin-openapi","purl":"pkg:golang/github.com/getkin/kin-openapi","ranges":[{"type":"SEMVER","events":[{"introduced":"0.136.0"},{"fixed":"0.143.0"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-p6wj-qrr4-pgh5/GHSA-p6wj-qrr4-pgh5.json"},"modified":"2026-10-21T03:11:56.394072112Z","origins":[{"source":"ghsa","sourceId":"GHSA-p6wj-qrr4-pgh5","modified":"2026-10-21T03:11:56.394072112Z","url":"https://osv.dev/vulnerability/GHSA-p6wj-qrr4-pgh5"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json","productId":"Red Hat Hardened Images:grafana12.4-0:12.4.12-0.4.hum1@aarch64","product":"grafana12.4-0:12.4.12-0.4.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:76677"}],"purl":"pkg:rpm/redhat/grafana12.4@12.4.12-0.4.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json"}]},{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json","productId":"Red Hat Hardened Images:grafana12.4-0:12.4.12-0.4.hum1@src","product":"grafana12.4-0:12.4.12-0.4.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:76677"}],"purl":"pkg:rpm/redhat/grafana12.4@12.4.12-0.4.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json"}]},{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json","productId":"Red Hat Hardened Images:grafana12.4-0:12.4.12-0.4.hum1@x86_64","product":"grafana12.4-0:12.4.12-0.4.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:76677"}],"purl":"pkg:rpm/redhat/grafana12.4@12.4.12-0.4.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json"}]},{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json","productId":"Red Hat Hardened Images:grafana13.1-0:13.1.7-0.1.hum1@aarch64","product":"grafana13.1-0:13.1.7-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:76448"}],"purl":"pkg:rpm/redhat/grafana13.1@13.1.7-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json"}]},{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json","productId":"Red Hat Hardened Images:grafana13.1-0:13.1.7-0.1.hum1@src","product":"grafana13.1-0:13.1.7-0.1.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:76448"}],"purl":"pkg:rpm/redhat/grafana13.1@13.1.7-0.1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json"}]},{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json","productId":"Red Hat Hardened Images:grafana13.1-0:13.1.7-0.1.hum1@x86_64","product":"grafana13.1-0:13.1.7-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:76448"}],"purl":"pkg:rpm/redhat/grafana13.1@13.1.7-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json"}]},{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json","productId":"Red Hat Hardened Images:grafana13.2-0:13.2.3-0.1.hum1@aarch64","product":"grafana13.2-0:13.2.3-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:76430"}],"purl":"pkg:rpm/redhat/grafana13.2@13.2.3-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json"}]},{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json","productId":"Red Hat Hardened Images:grafana13.2-0:13.2.3-0.1.hum1@src","product":"grafana13.2-0:13.2.3-0.1.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:76430"}],"purl":"pkg:rpm/redhat/grafana13.2@13.2.3-0.1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json"}]},{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json","productId":"Red Hat Hardened Images:grafana13.2-0:13.2.3-0.1.hum1@x86_64","product":"grafana13.2-0:13.2.3-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:76430"}],"purl":"pkg:rpm/redhat/grafana13.2@13.2.3-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json"}]},{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json","productId":"Red Hat Hardened Images:hugo-0:0.168.0-0.1.hum1@aarch64","product":"hugo-0:0.168.0-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:82637"}],"purl":"pkg:rpm/redhat/hugo@0.168.0-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json"}]},{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json","productId":"Red Hat Hardened Images:hugo-0:0.168.0-0.1.hum1@s390x","product":"hugo-0:0.168.0-0.1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:82637"}],"purl":"pkg:rpm/redhat/hugo@0.168.0-0.1.hum1?arch=s390x&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json"}]},{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json","productId":"Red Hat Hardened Images:hugo-0:0.168.0-0.1.hum1@src","product":"hugo-0:0.168.0-0.1.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:82637"}],"purl":"pkg:rpm/redhat/hugo@0.168.0-0.1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json"}]},{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json","productId":"Red Hat Hardened Images:hugo-0:0.168.0-0.1.hum1@x86_64","product":"hugo-0:0.168.0-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:82637"}],"purl":"pkg:rpm/redhat/hugo@0.168.0-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json"}]},{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json","productId":"red_hat_hardened_images:go-fdo-server.src","product":"go-fdo-server.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/go-fdo-server@1.0.2-1.1.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-97394","modified":"2026-10-17T03:51:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97394.json"}]}],"vendorCoverage":{"total":14,"shown":14,"omitted":0,"source":"redhat"}}