{"metadata": {"vulnerability": "CVE-2026-97394", "count": 120, "kinds": {"milestone": 9, "sighting": 2, "kev": 0, "other": 109}}, "data": [{"timestamp": "2024-03-05T00:00:00Z", "date_only": false, "value": "2024-03-05T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-03-05T00:00:00Z", "date_only": false, "value": "2024-03-05T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-03-05T00:00:00Z", "date_only": false, "value": "2024-03-05T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-03-06T00:00:00Z", "date_only": false, "value": "2024-03-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2024-03-06T00:00:00Z", "date_only": false, "value": "2024-03-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2024-03-06T00:00:00Z", "date_only": false, "value": "2024-03-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-09-03T13:36:32.244Z", "date_only": false, "value": "2026-09-03T13:36:32.244000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-09-24T14:16:20.202Z", "date_only": false, "value": "2026-09-24T14:16:20.202Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-97394", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-29T20:35:57.152Z", "date_only": false, "value": "2026-09-29T20:35:57.152000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-09-29T20:35:57.152Z", "date_only": false, "value": "2026-09-29T20:35:57.152000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-09-29T20:41:44.158Z", "date_only": false, "value": "2026-09-29T20:41:44.158139+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-09-29T20:41:44.158Z", "date_only": false, "value": "2026-09-29T20:41:44.158139+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-09-30T11:06:38.172Z", "date_only": false, "value": "2026-09-30T11:06:38.172000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-09-30T11:06:38.172Z", "date_only": false, "value": "2026-09-30T11:06:38.172000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-09-30T11:06:38.177Z", "date_only": false, "value": "2026-09-30T11:06:38.177000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-09-30T11:06:38.177Z", "date_only": false, "value": "2026-09-30T11:06:38.177000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-09-30T11:21:02.069Z", "date_only": false, "value": "2026-09-30T11:21:02.069718+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-09-30T11:21:02.069Z", "date_only": false, "value": "2026-09-30T11:21:02.069718+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-09-30T11:21:20.830Z", "date_only": false, "value": "2026-09-30T11:21:20.830493+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-09-30T11:21:20.830Z", "date_only": false, "value": "2026-09-30T11:21:20.830493+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-09-30T12:36:52.071Z", "date_only": false, "value": "2026-09-30T12:36:52.071589+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-10-05T22:17:42Z", "date_only": false, "value": "2026-10-05T22:17:42+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-05T22:17:42Z", "date_only": false, "value": "2026-10-05T22:17:42+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-05T22:17:42Z", "date_only": false, "value": "2026-10-05T22:17:42+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-05T22:26:33Z", "date_only": false, "value": "2026-10-05T22:26:33+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-05T22:26:33Z", "date_only": false, "value": "2026-10-05T22:26:33+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-05T22:26:33Z", "date_only": false, "value": "2026-10-05T22:26:33+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-06T08:26:00Z", "date_only": false, "value": "2026-10-06T08:26:00+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-06T08:26:00Z", "date_only": false, "value": "2026-10-06T08:26:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-06T08:26:00Z", "date_only": false, "value": "2026-10-06T08:26:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-07T17:46:35.620Z", "date_only": false, "value": "2026-10-07T17:46:35.620000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-07T17:46:35.620Z", "date_only": false, "value": "2026-10-07T17:46:35.620000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-07T17:46:35.620Z", "date_only": false, "value": "2026-10-07T17:46:35.620000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-07T18:01:23.622Z", "date_only": false, "value": "2026-10-07T18:01:23.622132+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-07T18:01:23.622Z", "date_only": false, "value": "2026-10-07T18:01:23.622132+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-07T18:01:23.622Z", "date_only": false, "value": "2026-10-07T18:01:23.622132+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-08T16:22:25.558Z", "date_only": false, "value": "2026-10-08T16:22:25.558000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-08T16:22:25.558Z", "date_only": false, "value": "2026-10-08T16:22:25.558000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-08T16:22:25.558Z", "date_only": false, "value": "2026-10-08T16:22:25.558000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-08T16:41:20.397Z", "date_only": false, "value": "2026-10-08T16:41:20.397001+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-08T16:41:20.397Z", "date_only": false, "value": "2026-10-08T16:41:20.397001+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-08T16:41:20.397Z", "date_only": false, "value": "2026-10-08T16:41:20.397001+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-13T15:49:51.223Z", "date_only": false, "value": "2026-10-13T15:49:51.223000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-10-13T15:49:51.223Z", "date_only": false, "value": "2026-10-13T15:49:51.223000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-10-13T15:49:51.223Z", "date_only": false, "value": "2026-10-13T15:49:51.223000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.10.release_date"}, {"timestamp": "2026-10-13T16:01:53.491Z", "date_only": false, "value": "2026-10-13T16:01:53.491379+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-10-13T16:01:53.491Z", "date_only": false, "value": "2026-10-13T16:01:53.491379+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-10-13T16:01:53.491Z", "date_only": false, "value": "2026-10-13T16:01:53.491379+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.10.discovery_date"}, {"timestamp": "2026-10-13T17:05:49.670Z", "date_only": false, "value": "2026-10-13T17:05:49.670000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-13T17:26:33.911Z", "date_only": false, "value": "2026-10-13T17:26:33.911607+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-14T00:21:37Z", "date_only": false, "value": "2026-10-14T00:21:37+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-14T00:21:37Z", "date_only": false, "value": "2026-10-14T00:21:37+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-14T00:21:37Z", "date_only": false, "value": "2026-10-14T00:21:37+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-15T08:12:51.245Z", "date_only": false, "value": "2026-10-15T08:12:51.245000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.11.release_date"}, {"timestamp": "2026-10-15T08:33:55.008Z", "date_only": false, "value": "2026-10-15T08:33:55.008957+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.11.discovery_date"}, {"timestamp": "2026-10-15T15:29:05.238Z", "date_only": false, "value": "2026-10-15T15:29:05.238Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-97394", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T15:29:05.238Z", "date_only": false, "value": "2026-10-15T15:29:05.238000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-10-15T15:29:05.238Z", "date_only": false, "value": "2026-10-15T15:29:05.238000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-10-15T15:29:05.238Z", "date_only": false, "value": "2026-10-15T15:29:05.238000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-15T15:29:05.238Z", "date_only": false, "value": "2026-10-15T15:29:05.238000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-15T15:29:05.238Z", "date_only": false, "value": "2026-10-15T15:29:05.238Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-97394", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T15:31:19.904Z", "date_only": false, "value": "2026-10-15T15:31:19.904000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-10-15T15:31:19.904Z", "date_only": false, "value": "2026-10-15T15:31:19.904000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-10-15T15:35:43.874Z", "date_only": false, "value": "2026-10-15T15:35:43.874000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-10-15T15:35:43.874Z", "date_only": false, "value": "2026-10-15T15:35:43.874000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-10-15T15:37:19.077Z", "date_only": false, "value": "2026-10-15T15:37:19.077000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-10-15T15:37:19.077Z", "date_only": false, "value": "2026-10-15T15:37:19.077000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2026-10-15T15:45:31.264Z", "date_only": false, "value": "2026-10-15T15:45:31.264018+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-10-15T15:45:31.264Z", "date_only": false, "value": "2026-10-15T15:45:31.264018+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-10-15T15:45:59.705Z", "date_only": false, "value": "2026-10-15T15:45:59.705582+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-10-15T15:45:59.705Z", "date_only": false, "value": "2026-10-15T15:45:59.705582+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-10-15T15:45:59.705Z", "date_only": false, "value": "2026-10-15T15:45:59.705582+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-15T15:45:59.705Z", "date_only": false, "value": "2026-10-15T15:45:59.705582+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-15T15:50:14.394Z", "date_only": false, "value": "2026-10-15T15:50:14.394335Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117445716465351019", "record": "CVE-2026-97394", "field": "creation_timestamp", "uuid": "fdb824c5-433e-4036-9701-d0a1d63cb2e1", "content": "CVE-2026-97394 kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.143.0, openapi3filter accepts OpenAPI 3.1 array schemas without an items keyword and then dereferences the nil Schema.Items value while decoding application/x-www-form-urlencoded or multipart/form-data request bodies, response headers, and other array parameter surfaces. A remote unauthenticated client can reach an affected operation with a nonempty request or matching response and deterministically trigger a nil-pointer panic during ValidateRequest or ValidateResponse. OpenAPI 3.0 documents are not affected because document validation rejects arrays without items, and JSON request bodies use a different decoder path. This issue is fixed in version 0.143.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-97394https://github.com/getkin/kin-openapi/security/advisories/GHSA-p6wj-qrr4-pgh5https://github.com/getkin/kin-openapi/commit/30e292371a89ca6d1f91a9553e0aa518b49f838dhttps://github.com/getkin/kin-openapi/releases/tag/v0.143.0#getkin #kin-openapi#CVE_2026_97394#bot", "url": "https://infosec.exchange/users/cve/statuses/117445716465351019"}, {"timestamp": "2026-10-15T15:50:37.453Z", "date_only": false, "value": "2026-10-15T15:50:37.453000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-10-15T15:50:37.453Z", "date_only": false, "value": "2026-10-15T15:50:37.453000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-15T15:51:05.132Z", "date_only": false, "value": "2026-10-15T15:51:05.132393+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-10-15T15:51:05.132Z", "date_only": false, "value": "2026-10-15T15:51:05.132393+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-10-15T15:52:30.041Z", "date_only": false, "value": "2026-10-15T15:52:30.041000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.9.release_date"}, {"timestamp": "2026-10-15T15:52:30.041Z", "date_only": false, "value": "2026-10-15T15:52:30.041000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2026-10-15T15:52:40.679Z", "date_only": false, "value": "2026-10-15T15:52:40.679996+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-10-15T15:52:40.679Z", "date_only": false, "value": "2026-10-15T15:52:40.679996+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-15T15:54:25.834Z", "date_only": false, "value": "2026-10-15T15:54:25.834000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2026-10-15T16:01:25.836Z", "date_only": false, "value": "2026-10-15T16:01:25.836287+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.9.discovery_date"}, {"timestamp": "2026-10-15T16:01:25.836Z", "date_only": false, "value": "2026-10-15T16:01:25.836287+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-10-15T16:01:52.384Z", "date_only": false, "value": "2026-10-15T16:01:52.384419+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-10-15T16:02:00.566Z", "date_only": false, "value": "2026-10-15T16:02:00.566000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2026-10-15T16:02:25.651Z", "date_only": false, "value": "2026-10-15T16:02:25.651913+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-10-15T16:02:25.651Z", "date_only": false, "value": "2026-10-15T16:02:25.651913+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-15T16:03:50.514Z", "date_only": false, "value": "2026-10-15T16:03:50.514000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2026-10-15T16:18:25Z", "date_only": false, "value": "2026-10-15T16:18:25Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P6WJ-QRR4-PGH5", "record": "GHSA-P6WJ-QRR4-PGH5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T16:18:25.273Z", "date_only": false, "value": "2026-10-15T16:18:25.273", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-97394", "record": "FKIE_CVE-2026-97394", "field": "published"}, {"timestamp": "2026-10-15T16:21:51.407Z", "date_only": false, "value": "2026-10-15T16:21:51.407667+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2026-10-15T16:22:12.494Z", "date_only": false, "value": "2026-10-15T16:22:12.494131+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2026-10-15T17:02:36.232Z", "date_only": false, "value": "2026-10-15T17:02:36.232830Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxwk3tborr2d", "record": "CVE-2026-97394", "field": "creation_timestamp", "uuid": "05fab757-540a-4bd2-b3d0-9074f1baf9ab", "content": "\ud83d\udfe0 CVE-2026-97394 - High (7.5)\n\nkin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.143.0, openapi3filte...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-97394/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxwk3tborr2d"}, {"timestamp": "2026-10-15T20:14:54Z", "date_only": false, "value": "2026-10-15T20:14:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P6WJ-QRR4-PGH5", "record": "GHSA-P6WJ-QRR4-PGH5", "field": "published"}, {"timestamp": "2026-10-15T20:14:54Z", "date_only": false, "value": "2026-10-15T20:14:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P6WJ-QRR4-PGH5", "record": "GHSA-P6WJ-QRR4-PGH5", "field": "modified"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-97394", "record": "UBUNTU-CVE-2026-97394", "field": "published"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-97394", "record": "UBUNTU-CVE-2026-97394", "field": "modified"}, {"timestamp": "2026-10-16T07:47:11Z", "date_only": false, "value": "2026-10-16T07:47:11+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-16T09:18:42Z", "date_only": false, "value": "2026-10-16T09:18:42+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-16T09:18:46Z", "date_only": false, "value": "2026-10-16T09:18:46+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-16T09:18:50Z", "date_only": false, "value": "2026-10-16T09:18:50+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-20T02:44:45.924Z", "date_only": false, "value": "2026-10-20T02:44:45.924107Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-97394", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-20T02:44:45.924Z", "date_only": false, "value": "2026-10-20T02:44:45.924107Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-97394", "record": "FKIE_CVE-2026-97394", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-20T02:45:09.805Z", "date_only": false, "value": "2026-10-20T02:45:09.805Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-97394", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-20T02:45:09.805Z", "date_only": false, "value": "2026-10-20T02:45:09.805Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-97394", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-20T03:17:17.587Z", "date_only": false, "value": "2026-10-20T03:17:17.587", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-97394", "record": "FKIE_CVE-2026-97394", "field": "lastModified"}, {"timestamp": "2026-10-21T19:42:22Z", "date_only": false, "value": "2026-10-21T19:42:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-21T19:42:22Z", "date_only": false, "value": "2026-10-21T19:42:22+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-21T19:42:22Z", "date_only": false, "value": "2026-10-21T19:42:22+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:82637", "record": "RHSA-2026:82637", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-22T05:47:53Z", "date_only": false, "value": "2026-10-22T05:47:53+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-22T05:47:53Z", "date_only": false, "value": "2026-10-22T05:47:53+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-22T05:47:53Z", "date_only": false, "value": "2026-10-22T05:47:53+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:76430", "record": "RHSA-2026:76430", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-22T05:47:54Z", "date_only": false, "value": "2026-10-22T05:47:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-22T05:47:54Z", "date_only": false, "value": "2026-10-22T05:47:54+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-22T05:47:54Z", "date_only": false, "value": "2026-10-22T05:47:54+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-22T05:47:54Z", "date_only": false, "value": "2026-10-22T05:47:54+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-22T05:47:54Z", "date_only": false, "value": "2026-10-22T05:47:54+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:76448", "record": "RHSA-2026:76448", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-22T05:47:54Z", "date_only": false, "value": "2026-10-22T05:47:54+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:76677", "record": "RHSA-2026:76677", "field": "document.tracking.current_release_date"}]}