CVE-2026-97030

Published: October 10, 2026Last modified: October 17, 2026

Description

A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped.

Severity score breakdown

Parameter	Value
Base score	6.1
Attack Vector	NETWORK
Attack complexity	LOW
Privileges required	NONE
User interaction	REQUIRED
Scope	CHANGED
Confidentiality	LOW
Integrity impact	LOW
Availability impact	NONE
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Status

Product	Release	Package	Status
Alpaquita Linux	23 LTS	go	Fixed (1.26.9-r0)
Alpaquita Linux	Stream	go	Fixed (1.27.2-r0)
Hardened Containers	23 LTS	go	Fixed (1.26.9-r0)
Hardened Containers	Stream	go	Fixed (1.27.2-r0)

References

How to Fix Liberica NIK Not Starting on macOS Catalina and Later

If you use macOS Catalina and later you may encounter the issue that prevents Liberica NIK from starting. To fix it, run the following:

sudo xattr -r -d com.apple.quarantine path/to/graalvm/folder/

If you need more help, check out the FAQ at the bottom of this page or contact us.