Red Hat Security AdvisoryRHSA-2026:85266
Red Hat Hardened Images RPMs Security Update
Released 2026-10-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images grafana13.2-13.2.3-0.3.hum1@aarch64, grafana13.2-13.2.3-0.3.hum1@s390x, grafana13.2-13.2.3-0.3.hum1@src +1
Fixes 9 records
Priority HIGH 77
go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.01318 · Published 2026-09-17 · Partial fix · 0.27.1 CWE-674
Priority HIGH 72
kin-openapi is a Go project for handling OpenAPI files.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00335 · Published 2026-10-15 · Fixed in 0.149.0 CWE-476
Priority HIGH 72
kin-openapi is a Go project for handling OpenAPI files.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00595 · Published 2026-10-15 · Partial fix · 0.148.0 CWE-754
Priority HIGH 72
kin-openapi is a Go project for handling OpenAPI files.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00435 · Published 2026-10-15 · Partial fix · 0.149.0 CWE-674
Priority HIGH 68
kin-openapi is a Go project for handling OpenAPI files.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00488 · Published 2026-10-15 · Fixed in 0.147.0 CWE-289
Priority HIGH 67
### Summary `qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot convert object to primitive value` when an array element cannot be coerced to a string, such as an object with an own non-callable `toStrin…
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00368 · Published 2026-10-14 · Fixed in 6.16.1 CWE-248
Priority MEDIUM 63
kin-openapi is a Go project for handling OpenAPI files.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00515 · Published 2026-10-15 · Partial fix · 0.145.0 CWE-20
Priority LOW 36
kin-openapi is a Go project for handling OpenAPI files.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00472 · Published 2026-10-15 · Partial fix · 0.146.0 CWE-476
Priority LOW 30
kin-openapi is a Go project for handling OpenAPI files.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00372 · Published 2026-10-15 · Partial fix · 0.145.0 CWE-476
THREATIST.IORead the docs