Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CGA-pfhp-x252-w3mr
published 19 days ago
Summary
No summary available.
What to do
- Update chainguard kubevela-vela-core to version 1.11.0-r22.
- Update wolfi kubevela-vela-core to version 1.11.0-r22.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | kubevela-vela-core |
< 1.11.0-r22 Fix: upgrade to 1.11.0-r22
|
| Wolfi | wolfi | kubevela-vela-core |
< 1.11.0-r22 Fix: upgrade to 1.11.0-r22
|
Original advisory text
CGA-pfhp-x252-w3mr
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/100xxx/CVE-2026-1003... Vendor Advisory
- https://github.com/getkin/kin-openapi/commit/9814d1f2b212f3508bf52296aa9e248b212... Patch
- https://github.com/getkin/kin-openapi/releases/tag/v0.149.0 URL
- https://github.com/getkin/kin-openapi/security/advisories/GHSA-vrcc-3ch7-hppw Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-100353 Vendor Advisory
Severity
7.5
High
Timeline
Published16 Oct 2026
Updated17 Oct 2026
First seen16 Oct 2026
Sources
CGA-pfhp-x252-w3mr · OSV
Track software like this
Free during beta