{"id":"EUVD-2026-76157","enisaUuid":"7254ecfc-c217-352e-8999-609d09f696d8","description":"An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame containing a header value type outside the valid range.\n\n\n\nTo remediate this issue, users should upgrade to release-2026-03-23 or later, and patch any forked or derivative code.","datePublished":"Sep 11, 2026, 5:03:33 PM","dateUpdated":"Sep 24, 2026, 7:29:25 PM","baseScore":8.2,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/aws/aws-sdk-go-v2/security/advisories/GHSA-xmrv-pmrh-hhx2\nhttps://github.com/aws/aws-sdk-go-v2/releases/tag/release-2026-03-23\nhttps://aws.amazon.com/security/security-bulletins/2026-110-aws/\n","aliases":"CVE-2026-89090\n","assigner":"AMZN","epss":0.31,"enisaIdProduct":[{"id":"3eda107f-6bf4-37d6-8576-75422509ec59","product":{"name":"AWS SDK for Go v2","vendor":{"name":"aws"}},"product_version":"0 \u003c2026-03-23"}],"enisaIdVendor":[{"id":"0cba8622-c7ad-33ef-aa7a-6da97a1cb58b","vendor":{"name":"aws"}}],"enisaIdVulnerability":[{"id":"fd448772-fa14-3bb4-afc1-e957ebed58e6","vulnerability":{"id":"CVE-2026-89090","description":"An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response frame containing a header value type outside the valid range.\n\n\n\nTo remediate this issue, users should upgrade to release-2026-03-23 or later, and patch any forked or derivative code.","datePublished":"Sep 11, 2026, 5:03:33 PM","dateUpdated":"Sep 24, 2026, 7:29:25 PM","status":"PUBLISHED","baseScore":8.2,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/aws/aws-sdk-go-v2/security/advisories/GHSA-xmrv-pmrh-hhx2\nhttps://github.com/aws/aws-sdk-go-v2/releases/tag/release-2026-03-23\nhttps://aws.amazon.com/security/security-bulletins/2026-110-aws/\n","enisa_id":"EUVD-2026-76157\n","assigner":"AMZN","epss":0.31,"dataProcessed":"Nov 7, 2026, 7:18:00 AM","vulnerabilityProduct":[{"id":"eff36ab7-b89b-3a6b-bf2c-e7fcc88c6c33","product":{"name":"AWS SDK for Go v2","vendor":{"name":"aws"}},"product_version":"0 \u003c2026-03-23"}],"vulnerabilityVendor":[{"id":"136171ce-52e7-3830-b19f-cbad810227c7","vendor":{"name":"aws"}}]}}],"enisaIdAdvisory":[{"id":"15bf2049-1d66-3802-90c7-42317d43d180","advisory":{"id":"openSUSE-SU-2026:12107-1","description":"amazon-ecs-init-1.108.0-1.1 on GA media","summary":"amazon-ecs-init-1.108.0-1.1 on GA media","datePublished":"Oct 12, 2026, 12:00:00 AM","dateUpdated":"Oct 13, 2026, 9:48:39 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12107-1.json\nhttps://www.suse.com/security/cve/CVE-2026-84445/\nhttps://www.suse.com/security/cve/CVE-2026-89090/\n","aliases":"CVE-2026-84445\nCVE-2026-89090\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"03bfe5b4-7e24-35be-8ca9-be632a1f67d2","product":{"name":"amazon-ecs-init-0:1.108.0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"3c9844c2-538f-311e-a591-3d94b6b097a6","product":{"name":"amazon-ecs-init-0:1.108.0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"43dd1c05-e5cf-34af-a3cf-6cabe4b5a90e","product":{"name":"amazon-ecs-init-0:1.108.0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"67dc44ba-1550-3d65-9c59-26851d3fc954","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"99059c1a-76d1-313e-a084-92820709114d","product":{"name":"amazon-ecs-init-0:1.108.0-1.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"1977aafc-0f67-34bd-8e3b-4d18162b0043","advisory":{"id":"RHSA-2026:91249","description":"Red Hat Security Advisory: Red Hat AI Base Images 3.5.5 (Neuron)","summary":"Red Hat AI Base Images 3.5.5 (Neuron) is now available.","datePublished":"Oct 27, 2026, 7:14:39 PM","dateUpdated":"Nov 7, 2026, 4:04:19 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:91249\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_91249.json\n","aliases":"CVE-2025-69418\nCVE-2026-6653\nCVE-2026-11979\nCVE-2026-13346\nCVE-2026-25679\nCVE-2026-25680\nCVE-2026-25681\nCVE-2026-27136\nCVE-2026-27137\nCVE-2026-27138\nCVE-2026-27139\nCVE-2026-27141\nCVE-2026-27142\nCVE-2026-27145\nCVE-2026-28390\nCVE-2026-31790\nCVE-2026-32280\nCVE-2026-32281\nCVE-2026-32282\nCVE-2026-32288\nCVE-2026-32289\nCVE-2026-33811\nCVE-2026-33814\nCVE-2026-34182\nCVE-2026-34183\nCVE-2026-39820\nCVE-2026-39822\nCVE-2026-39823\nCVE-2026-39825\nCVE-2026-39826\nCVE-2026-39836\nCVE-2026-42499\nCVE-2026-42502\nCVE-2026-42504\nCVE-2026-42505\nCVE-2026-42506\nCVE-2026-42507\nCVE-2026-45445\nCVE-2026-45447\nCVE-2026-74860\nCVE-2026-86138\nCVE-2026-86140\nCVE-2026-86142\nCVE-2026-86143\nCVE-2026-86144\nCVE-2026-86145\nCVE-2026-89090\nCVE-2026-89161\nCVE-2026-103111\nCVE-2026-114406\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"0c69cb1c-9ba9-3f75-a105-6985b368b743","product":{"name":"registry.redhat.io/rhai/base-image-neuron-rhel9@sha256:a58c08d0d7d868ef2be9ad7d8e20468d3192a49757f5c34e4e317dd0cdf732cd_amd64","vendor":{"name":"Red Hat"}}},{"id":"c604cbbe-f09b-3806-8be6-bd6c8fce1eb8","product":{"name":"Red Hat OpenShift AI 3.5","vendor":{"name":"Red Hat"}}}]}},{"id":"221e6ffa-c627-3b4b-bc15-bf65d232fce6","advisory":{"id":"openSUSE-SU-2026:22145-1","description":"Security update for amazon-ecs-init","summary":"Security update for amazon-ecs-init","datePublished":"Oct 20, 2026, 3:10:57 PM","dateUpdated":"Oct 22, 2026, 5:13:29 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_22145-1.json\nhttps://bugzilla.suse.com/1279042\nhttps://bugzilla.suse.com/1280679\nhttps://www.suse.com/security/cve/CVE-2026-84445/\nhttps://www.suse.com/security/cve/CVE-2026-89090/\n","aliases":"CVE-2026-84445\nCVE-2026-89090\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0e6bb561-d5ae-3c88-b50b-8e13bb15f599","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"21807bf6-726d-3af6-923e-22231935f770","product":{"name":"amazon-ecs-init-0:1.108.0-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"cf2d61b3-4b6d-356a-8e40-05686cb26ecf","product":{"name":"amazon-ecs-init-0:1.108.0-160000.1.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"4286ea74-d7f8-3178-94cd-736d79849a72","advisory":{"id":"openSUSE-SU-2026:11803-1","description":"alloy-1.19.2-1.1 on GA media","summary":"alloy-1.19.2-1.1 on GA media","datePublished":"Sep 17, 2026, 12:00:00 AM","dateUpdated":"Sep 18, 2026, 9:18:20 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11803-1.json\nhttps://www.suse.com/security/cve/CVE-2026-2303/\nhttps://www.suse.com/security/cve/CVE-2026-37236/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-45679/\nhttps://www.suse.com/security/cve/CVE-2026-45680/\nhttps://www.suse.com/security/cve/CVE-2026-45681/\nhttps://www.suse.com/security/cve/CVE-2026-45683/\nhttps://www.suse.com/security/cve/CVE-2026-45684/\nhttps://www.suse.com/security/cve/CVE-2026-46600/\nhttps://www.suse.com/security/cve/CVE-2026-48496/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-56854/\nhttps://www.suse.com/security/cve/CVE-2026-71556/\nhttps://www.suse.com/security/cve/CVE-2026-71557/\nhttps://www.suse.com/security/cve/CVE-2026-75889/\nhttps://www.suse.com/security/cve/CVE-2026-75890/\nhttps://www.suse.com/security/cve/CVE-2026-81521/\nhttps://www.suse.com/security/cve/CVE-2026-89090/\n","aliases":"CVE-2026-2303\nCVE-2026-37236\nCVE-2026-41178\nCVE-2026-45679\nCVE-2026-45680\nCVE-2026-45681\nCVE-2026-45683\nCVE-2026-45684\nCVE-2026-46600\nCVE-2026-48496\nCVE-2026-56852\nCVE-2026-56854\nCVE-2026-71556\nCVE-2026-71557\nCVE-2026-75889\nCVE-2026-75890\nCVE-2026-81521\nCVE-2026-89090\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"4ad2db76-9ee0-3b0d-a0c0-34dc9f6f18cb","product":{"name":"alloy-0:1.19.2-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"99c06821-5f7f-389d-887c-1b7bc72edf62","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"b1c8df70-5853-3d74-81b9-358eecb870e2","product":{"name":"alloy-0:1.19.2-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"c71751e1-8074-3a61-a198-66f16e8b52f3","product":{"name":"alloy-0:1.19.2-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"fce2243c-4cc4-34c6-ae74-d63241890bd2","product":{"name":"alloy-0:1.19.2-1.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"4911fb0b-b797-34fa-bf68-69a670baa298","advisory":{"id":"SUSE-SU-2026:24265-1","description":"Security update for amazon-ecs-init","summary":"Security update for amazon-ecs-init","datePublished":"Oct 20, 2026, 3:19:51 PM","dateUpdated":"Oct 23, 2026, 9:42:20 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_24265-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624265-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624265-1/\nhttps://bugzilla.suse.com/1279042\nhttps://bugzilla.suse.com/1280679\nhttps://www.suse.com/security/cve/CVE-2026-84445/\nhttps://www.suse.com/security/cve/CVE-2026-89090/\n","aliases":"CVE-2026-84445\nCVE-2026-89090\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"28e320bb-0fa3-39d2-b07c-c8cddafb3139","product":{"name":"amazon-ecs-init-0:1.108.0-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"4cd29b4d-4289-38a6-80d9-128841f18006","product":{"name":"SUSE Linux Enterprise Server for SAP applications 16.0","vendor":{"name":"SUSE"}}},{"id":"56d915e9-6c2c-3b50-b8d2-8b147590ad94","product":{"name":"SUSE Linux Enterprise Server 16.0","vendor":{"name":"SUSE"}}},{"id":"7b6d6a81-3a65-367a-ac1f-e8f70345154d","product":{"name":"amazon-ecs-init-0:1.108.0-160000.1.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"49f2624f-87a2-3caf-8329-31ddfd151aab","advisory":{"id":"openSUSE-SU-2026:22032-1","description":"Security update for alloy","summary":"Security update for alloy","datePublished":"Oct 6, 2026, 1:15:27 PM","dateUpdated":"Oct 8, 2026, 6:03:03 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_22032-1.json\nhttps://bugzilla.suse.com/1267482\nhttps://bugzilla.suse.com/1267483\nhttps://bugzilla.suse.com/1267484\nhttps://bugzilla.suse.com/1267486\nhttps://bugzilla.suse.com/1267487\nhttps://bugzilla.suse.com/1268982\nhttps://bugzilla.suse.com/1269861\nhttps://bugzilla.suse.com/1272028\nhttps://bugzilla.suse.com/1272418\nhttps://bugzilla.suse.com/1276742\nhttps://bugzilla.suse.com/1276982\nhttps://bugzilla.suse.com/1276992\nhttps://bugzilla.suse.com/1277429\nhttps://bugzilla.suse.com/1277996\nhttps://bugzilla.suse.com/1278671\nhttps://bugzilla.suse.com/1278693\nhttps://bugzilla.suse.com/1280671\nhttps://www.suse.com/security/cve/CVE-2026-2303/\nhttps://www.suse.com/security/cve/CVE-2026-37236/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-45679/\nhttps://www.suse.com/security/cve/CVE-2026-45680/\nhttps://www.suse.com/security/cve/CVE-2026-45681/\nhttps://www.suse.com/security/cve/CVE-2026-45683/\nhttps://www.suse.com/security/cve/CVE-2026-45684/\nhttps://www.suse.com/security/cve/CVE-2026-46600/\nhttps://www.suse.com/security/cve/CVE-2026-48496/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-56854/\nhttps://www.suse.com/security/cve/CVE-2026-56855/\nhttps://www.suse.com/security/cve/CVE-2026-71556/\nhttps://www.suse.com/security/cve/CVE-2026-71557/\nhttps://www.suse.com/security/cve/CVE-2026-75889/\nhttps://www.suse.com/security/cve/CVE-2026-78662/\nhttps://www.suse.com/security/cve/CVE-2026-81521/\nhttps://www.suse.com/security/cve/CVE-2026-89090/\n","aliases":"CVE-2026-2303\nCVE-2026-37236\nCVE-2026-41178\nCVE-2026-45679\nCVE-2026-45680\nCVE-2026-45681\nCVE-2026-45683\nCVE-2026-45684\nCVE-2026-46600\nCVE-2026-48496\nCVE-2026-56852\nCVE-2026-56854\nCVE-2026-56855\nCVE-2026-71556\nCVE-2026-71557\nCVE-2026-75889\nCVE-2026-78662\nCVE-2026-81521\nCVE-2026-89090\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"983939ce-25d6-3506-b784-724de140ef22","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"9c06dda8-5542-38aa-93f9-7277dbcb441e","product":{"name":"alloy-0:1.19.2-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"d98f7d07-9a7a-3866-8e35-61b9b2ef5507","product":{"name":"alloy-0:1.19.2-160000.1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"f1049465-d3a5-30cc-9724-fe0dcb7c75ca","product":{"name":"alloy-0:1.19.2-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f1e8b605-59f0-384f-82d5-bac30cb187a9","product":{"name":"alloy-0:1.19.2-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"6dfebae4-992c-3bd3-82f0-d0f0cdf6f297","advisory":{"id":"SUSE-SU-2026:24148-1","description":"Security update for alloy","summary":"Security update for alloy","datePublished":"Oct 6, 2026, 1:07:44 PM","dateUpdated":"Oct 16, 2026, 9:49:12 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_24148-1.json\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624148-1/\nhttps://www.suse.com/support/update/announcement/2026/suse-su-202624148-1/\nhttps://bugzilla.suse.com/1267482\nhttps://bugzilla.suse.com/1267483\nhttps://bugzilla.suse.com/1267484\nhttps://bugzilla.suse.com/1267486\nhttps://bugzilla.suse.com/1267487\nhttps://bugzilla.suse.com/1268982\nhttps://bugzilla.suse.com/1269861\nhttps://bugzilla.suse.com/1272028\nhttps://bugzilla.suse.com/1272418\nhttps://bugzilla.suse.com/1276742\nhttps://bugzilla.suse.com/1276982\nhttps://bugzilla.suse.com/1276992\nhttps://bugzilla.suse.com/1277429\nhttps://bugzilla.suse.com/1277996\nhttps://bugzilla.suse.com/1278671\nhttps://bugzilla.suse.com/1278693\nhttps://bugzilla.suse.com/1280671\nhttps://www.suse.com/security/cve/CVE-2026-2303/\nhttps://www.suse.com/security/cve/CVE-2026-37236/\nhttps://www.suse.com/security/cve/CVE-2026-41178/\nhttps://www.suse.com/security/cve/CVE-2026-45679/\nhttps://www.suse.com/security/cve/CVE-2026-45680/\nhttps://www.suse.com/security/cve/CVE-2026-45681/\nhttps://www.suse.com/security/cve/CVE-2026-45683/\nhttps://www.suse.com/security/cve/CVE-2026-45684/\nhttps://www.suse.com/security/cve/CVE-2026-46600/\nhttps://www.suse.com/security/cve/CVE-2026-48496/\nhttps://www.suse.com/security/cve/CVE-2026-56852/\nhttps://www.suse.com/security/cve/CVE-2026-56854/\nhttps://www.suse.com/security/cve/CVE-2026-56855/\nhttps://www.suse.com/security/cve/CVE-2026-71556/\nhttps://www.suse.com/security/cve/CVE-2026-71557/\nhttps://www.suse.com/security/cve/CVE-2026-75889/\nhttps://www.suse.com/security/cve/CVE-2026-78662/\nhttps://www.suse.com/security/cve/CVE-2026-81521/\nhttps://www.suse.com/security/cve/CVE-2026-89090/\n","aliases":"CVE-2026-2303\nCVE-2026-37236\nCVE-2026-41178\nCVE-2026-45679\nCVE-2026-45680\nCVE-2026-45681\nCVE-2026-45683\nCVE-2026-45684\nCVE-2026-46600\nCVE-2026-48496\nCVE-2026-56852\nCVE-2026-56854\nCVE-2026-56855\nCVE-2026-71556\nCVE-2026-71557\nCVE-2026-75889\nCVE-2026-78662\nCVE-2026-81521\nCVE-2026-89090\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"34797216-6943-3264-899d-1c1d46dc59c0","product":{"name":"alloy-0:1.19.2-160000.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"3c8bc61e-7929-3950-85eb-45fd49aa11c4","product":{"name":"SUSE Linux Enterprise Server 16.0","vendor":{"name":"SUSE"}}},{"id":"4e10ccb0-c4ac-3d58-bc6d-dd6c93ba5089","product":{"name":"alloy-0:1.19.2-160000.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"7f57f1f2-80af-3bcc-8d45-c5e2d7b693ca","product":{"name":"SUSE Linux Enterprise Server for SAP applications 16.0","vendor":{"name":"SUSE"}}},{"id":"d6fdad13-fcab-3794-8531-4c093ce13455","product":{"name":"alloy-0:1.19.2-160000.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"e42594df-d83b-33ed-98ad-36700a2eb77f","product":{"name":"alloy-0:1.19.2-160000.1.1.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"934b1782-7fe7-31f7-8615-05d2f6f4453f","advisory":{"id":"openSUSE-SU-2026:11821-1","description":"kbfs-6.6.3-5.1 on GA media","summary":"kbfs-6.6.3-5.1 on GA media","datePublished":"Sep 19, 2026, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 9:49:39 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11821-1.json\nhttps://www.suse.com/security/cve/CVE-2026-89090/\n","aliases":"CVE-2026-89090\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"15ed30fd-cbfb-3feb-8116-799dfce642fd","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"3c60f869-31f5-3d0f-9ba9-9c384f19c8b1","product":{"name":"kbfs-git-0:6.6.3-5.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"5037a2a6-2dad-3d29-b236-9e669a7c19bf","product":{"name":"keybase-client-0:6.6.3-5.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"538da421-4e1d-3c74-a048-aead14ef2e5b","product":{"name":"kbfs-0:6.6.3-5.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"5c71ab88-29ed-300f-aef9-c65cb69443da","product":{"name":"kbfs-tool-0:6.6.3-5.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"5d0c90f1-41ae-30b1-baeb-0a6606f4b714","product":{"name":"kbfs-git-0:6.6.3-5.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"78a4b7a3-22b4-35b5-bbf8-c54c947cf460","product":{"name":"kbfs-tool-0:6.6.3-5.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"870774da-4cbd-3bbe-8fc6-202f28073d57","product":{"name":"kbfs-0:6.6.3-5.1.s390x","vendor":{"name":"SUSE"}}},{"id":"9422e814-3bf0-3bac-ae5f-96f57d182da1","product":{"name":"keybase-client-0:6.6.3-5.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"98f6173d-afa4-3d88-9eba-1f73c6fe2080","product":{"name":"kbfs-git-0:6.6.3-5.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"9fdf20b0-474f-32cf-b886-772aa3197824","product":{"name":"kbfs-0:6.6.3-5.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"a46ab568-b651-3b64-be9d-cb9544a8667b","product":{"name":"kbfs-tool-0:6.6.3-5.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"abea0da3-164a-3c51-8c3a-2ced58800418","product":{"name":"keybase-client-0:6.6.3-5.1.s390x","vendor":{"name":"SUSE"}}},{"id":"ace3c9e6-e30e-3db0-95ca-25218ca59ff1","product":{"name":"kbfs-0:6.6.3-5.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"d2f80058-f7b8-3a99-87ad-8b597328c3ae","product":{"name":"kbfs-git-0:6.6.3-5.1.s390x","vendor":{"name":"SUSE"}}},{"id":"d7fffe74-755a-3a34-8036-23f102095866","product":{"name":"kbfs-tool-0:6.6.3-5.1.s390x","vendor":{"name":"SUSE"}}},{"id":"ff939c03-fd6f-35fe-9d4d-5e2ba5c953ae","product":{"name":"keybase-client-0:6.6.3-5.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"bff4e1fd-e3fb-30a5-ab20-b16d2f4b883b","advisory":{"id":"openSUSE-SU-2026:22224-1","description":"Security update for rqlite","summary":"Security update for rqlite","datePublished":"Nov 3, 2026, 6:20:11 PM","dateUpdated":"Nov 4, 2026, 9:58:43 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_22224-1.json\nhttps://bugzilla.suse.com/1266544\nhttps://bugzilla.suse.com/1278793\nhttps://bugzilla.suse.com/1279102\nhttps://bugzilla.suse.com/1279253\nhttps://bugzilla.suse.com/1280657\nhttps://bugzilla.suse.com/1283555\nhttps://bugzilla.suse.com/1286934\nhttps://www.suse.com/security/cve/CVE-2026-39821/\nhttps://www.suse.com/security/cve/CVE-2026-63209/\nhttps://www.suse.com/security/cve/CVE-2026-84303/\nhttps://www.suse.com/security/cve/CVE-2026-84304/\nhttps://www.suse.com/security/cve/CVE-2026-84445/\nhttps://www.suse.com/security/cve/CVE-2026-89090/\n","aliases":"CVE-2026-39821\nCVE-2026-63209\nCVE-2026-84303\nCVE-2026-84304\nCVE-2026-84445\nCVE-2026-89090\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"26dc0aca-eea8-30c9-8a25-51d47e45444a","product":{"name":"rqlite-0:10.6.6-bp160.1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"2c229e15-c09b-39f8-b4c8-a9a6c7118412","product":{"name":"rqlite-0:10.6.6-bp160.1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"4821fb1f-7f27-329a-b568-7636ac86eb92","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"5c9a8dd8-6526-315e-827e-c5535bd58d48","product":{"name":"rqlite-0:10.6.6-bp160.1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"e5300030-3ba7-33ac-a5a1-a8fa7b1d6798","product":{"name":"rqlite-0:10.6.6-bp160.1.1.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"d6bd90d1-16d2-32a6-bab2-4f49aa3a97a5","advisory":{"id":"RHSA-2026:91248","description":"Red Hat Security Advisory: Red Hat AI Base Images 3.4.6 (Neuron)","summary":"Red Hat AI Base Images 3.4.6 (Neuron) is now available.","datePublished":"Oct 27, 2026, 7:13:14 PM","dateUpdated":"Nov 7, 2026, 4:04:18 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:91248\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_91248.json\n","aliases":"CVE-2025-69418\nCVE-2026-6653\nCVE-2026-11979\nCVE-2026-13346\nCVE-2026-25679\nCVE-2026-25680\nCVE-2026-25681\nCVE-2026-27136\nCVE-2026-27137\nCVE-2026-27138\nCVE-2026-27139\nCVE-2026-27141\nCVE-2026-27142\nCVE-2026-27145\nCVE-2026-28390\nCVE-2026-31790\nCVE-2026-32280\nCVE-2026-32281\nCVE-2026-32282\nCVE-2026-32288\nCVE-2026-32289\nCVE-2026-33811\nCVE-2026-33814\nCVE-2026-34182\nCVE-2026-34183\nCVE-2026-39820\nCVE-2026-39822\nCVE-2026-39823\nCVE-2026-39825\nCVE-2026-39826\nCVE-2026-39836\nCVE-2026-42499\nCVE-2026-42502\nCVE-2026-42504\nCVE-2026-42505\nCVE-2026-42506\nCVE-2026-42507\nCVE-2026-44172\nCVE-2026-45445\nCVE-2026-45447\nCVE-2026-74860\nCVE-2026-86138\nCVE-2026-86140\nCVE-2026-86142\nCVE-2026-86143\nCVE-2026-86144\nCVE-2026-86145\nCVE-2026-89090\nCVE-2026-89161\nCVE-2026-103111\nCVE-2026-114406\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"892aea70-3201-3c33-a7eb-df363dc839dd","product":{"name":"Red Hat OpenShift AI 3.4","vendor":{"name":"Red Hat"}}},{"id":"ef8f1dca-46d4-3d94-a261-7f88be5d105c","product":{"name":"registry.redhat.io/rhai/base-image-neuron-rhel9@sha256:f947bdf709d1ad14e5a339c7eddab27bb1b59744af1f12a18f83a960b64e9e30_amd64","vendor":{"name":"Red Hat"}}}]}},{"id":"edf37743-aca2-3925-9dcc-fcecd9c8e116","advisory":{"id":"openSUSE-SU-2026:12186-1","description":"rqlite-10.6.1-1.1 on GA media","summary":"rqlite-10.6.1-1.1 on GA media","datePublished":"Oct 18, 2026, 12:00:00 AM","dateUpdated":"Oct 19, 2026, 5:24:17 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12186-1.json\nhttps://www.suse.com/security/cve/CVE-2026-63209/\nhttps://www.suse.com/security/cve/CVE-2026-84304/\nhttps://www.suse.com/security/cve/CVE-2026-84445/\nhttps://www.suse.com/security/cve/CVE-2026-89090/\n","aliases":"CVE-2026-63209\nCVE-2026-84304\nCVE-2026-84445\nCVE-2026-89090\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"24c76c70-7c97-3fb8-a4ed-100901496ea1","product":{"name":"rqlite-0:10.6.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"3b6acf2f-4dda-332d-8798-447145f7a820","product":{"name":"rqlite-0:10.6.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"998dce4b-f7e2-3ab7-a19d-406df92d4a0e","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"b8cf38a8-03a0-3c93-bcc4-1386f5bdd7da","product":{"name":"rqlite-0:10.6.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"be88a570-1779-38f2-b13c-72555641273f","product":{"name":"rqlite-0:10.6.1-1.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"f970ceb8-4360-39e5-8d53-cd2f8d1346e8","advisory":{"id":"openSUSE-SU-2026:21925-1","description":"Security update for keybase-client","summary":"Security update for keybase-client","datePublished":"Sep 21, 2026, 2:35:49 PM","dateUpdated":"Sep 24, 2026, 5:48:24 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21925-1.json\nhttps://bugzilla.suse.com/1280628\nhttps://www.suse.com/security/cve/CVE-2026-89090/\n","aliases":"CVE-2026-89090\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"0012527d-b03b-3e09-899a-2279ccdde58d","product":{"name":"kbfs-0:6.6.3-bp160.4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"062c6d81-5291-36bf-936d-804a885b94e6","product":{"name":"kbfs-tool-0:6.6.3-bp160.4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"0d70d23f-7d75-38a0-8175-f05d262b8ab2","product":{"name":"kbfs-tool-0:6.6.3-bp160.4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"171e5d63-bc72-34e5-9791-c3cc06eba203","product":{"name":"keybase-client-0:6.6.3-bp160.4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"219a583a-ad95-323d-9a65-05c2a1b28462","product":{"name":"kbfs-git-0:6.6.3-bp160.4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"21a9c3f1-6751-3c63-810a-3517bfba2283","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"26b674dc-8100-313d-9856-b6081d98e14d","product":{"name":"kbfs-0:6.6.3-bp160.4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"2b750b07-96fd-336a-869f-4decff2d07cf","product":{"name":"kbfs-0:6.6.3-bp160.4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"4194554d-5c3b-3fa0-91b1-f3e128d1d164","product":{"name":"kbfs-git-0:6.6.3-bp160.4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"48345084-20e0-3592-829b-5f61fcee0856","product":{"name":"kbfs-tool-0:6.6.3-bp160.4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"4d0165a2-2196-323a-aefa-499a62a54e3e","product":{"name":"keybase-client-0:6.6.3-bp160.4.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"795442d7-7b2f-3d91-b4ab-37863c280ec4","product":{"name":"kbfs-0:6.6.3-bp160.4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"866978dd-f373-3e46-a2c1-60c4fe74ccd6","product":{"name":"kbfs-tool-0:6.6.3-bp160.4.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"a2a51c15-647e-377a-87a0-4ccd120244e0","product":{"name":"keybase-client-0:6.6.3-bp160.4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"a7bfd3b6-1099-3a26-a67a-d00d08939b4d","product":{"name":"keybase-client-0:6.6.3-bp160.4.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"b41a2cde-d4ee-373e-8ae1-3379840f6d69","product":{"name":"kbfs-git-0:6.6.3-bp160.4.1.s390x","vendor":{"name":"SUSE"}}},{"id":"f228f47c-5eba-3793-abef-052f857cdc47","product":{"name":"kbfs-git-0:6.6.3-bp160.4.1.aarch64","vendor":{"name":"SUSE"}}}]}},{"id":"fb74c91b-b2ad-3752-9050-84cdf3f5a712","advisory":{"id":"openSUSE-SU-2026:12208-1","description":"amazon-cloudwatch-agent-1.300073.0-3.1 on GA media","summary":"amazon-cloudwatch-agent-1.300073.0-3.1 on GA media","datePublished":"Oct 21, 2026, 12:00:00 AM","dateUpdated":"Oct 22, 2026, 10:43:48 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12208-1.json\nhttps://www.suse.com/security/cve/CVE-2026-78669/\nhttps://www.suse.com/security/cve/CVE-2026-89090/\n","aliases":"CVE-2026-78669\nCVE-2026-89090\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"1096c79f-fd90-39bf-90af-93f7d17a9800","product":{"name":"amazon-cloudwatch-agent-0:1.300073.0-3.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"83dcc53d-db37-3016-be67-15fae9e713e6","product":{"name":"amazon-cloudwatch-agent-0:1.300073.0-3.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"9f85f1ff-b34d-3ff0-949f-42ce75289d79","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"a47a03cf-724a-3800-8573-713514e501e5","product":{"name":"amazon-cloudwatch-agent-0:1.300073.0-3.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"c4223ea5-9261-3993-8194-a7e070a18b7c","product":{"name":"amazon-cloudwatch-agent-0:1.300073.0-3.1.s390x","vendor":{"name":"SUSE"}}}]}}]}