TI-2026-74661 CVE-2026-97394 · GHSA-p6wj-qrr4-pgh5
kin-openapi nil pointer panic in openapi3filter on array schemas without items
Priority HIGH 72
kin-openapi is a Go project for handling OpenAPI files.
RHSA-2026:76677
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-10-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images grafana12.4-12.4.12-0.4.hum1@aarch64, grafana12.4-12.4.12-0.4.hum1@src, grafana12.4-12.4.12-0.4.hum1@x86_64
Fixes 12 records
TI-2026-74649 CVE-2026-100351 · GHSA-23vg-4cjm-66q5
Authentication bypass in kin-openapi via encoded URL paths
Priority HIGH 68
kin-openapi is a Go project for handling OpenAPI files.
Priority MEDIUM 64
Axios is a promise-based HTTP client for the browser and Node.js.
TI-2026-74658 CVE-2026-100350 · GHSA-h4r5-mxv5-8mjc
Repeated regexp compilation in kin-openapi deepObject query decoding
Priority MEDIUM 63
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-74655 CVE-2026-100347 · GHSA-fh4f-47mf-f2gj
Panic in kin-openapi legacy router from unsupported HTTP method
Priority MEDIUM 63
kin-openapi is a Go project for handling OpenAPI files.
TI-2024-16303 CVE-2024-24786 · GHSA-8r3f-844c-mc37
Infinite loop in JSON unmarshaling in google.golang.org/protobuf
Priority MEDIUM 41
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.
TI-2026-74679 CVE-2026-109855 · GHSA-qq8j-7v2v-3rwp
Denial of service in undici WebSocket client over HTTP/2
Priority LOW 39
undici is an HTTP client library for Node.js.
TI-2026-69257 CVE-2026-56851 · GHSA-gx9w-9qq8-m485
Panic in golang.org/x/text Nickname profile parsing crafted input
Priority LOW 39
The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.
TI-2026-74803 CVE-2026-100349 · GHSA-74vm-87hj-r66f
Nil pointer panic in kin-openapi response header validation
Priority LOW 36
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-74660 CVE-2026-100348 · GHSA-mh7x-f8wq-4jhx
Nil pointer panic in kin-openapi loader on self-referential ref
Priority LOW 30
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-71935 CVE-2026-95502 · GHSA-w2wx-887f-65f8
Memory exhaustion in Grafana Git Sync via a malicious Git server
Priority LOW 24
A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses (uncontrolled resource consumption).
TI-2026-69611 CVE-2026-61801 · GHSA-mjcv-p78q-w5fw
Unbounded parsing in moby/sys/user lets attackers exhaust memory
Priority LOW 24
The `github.com/moby/sys/user` package provides Go utilities for parsing and looking up entries in Unix-style user and group database files.