Vulnerabilities

TI-2026-74664 CVE-2026-100353 · GHSA-vrcc-3ch7-hppw

Nil pointer panic in kin-openapi openapi3filter decoding

HIGH 72

kin-openapi is a Go project for handling OpenAPI files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00335 Published 2026-10-15 Fixed in 0.149.0 CWE-476

TI-2026-74657 CVE-2026-100354 · GHSA-g8cf-rcjf-c8cf

Uncontrolled recursion in kin-openapi crashes the process

HIGH 72

kin-openapi is a Go project for handling OpenAPI files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00435 Published 2026-10-15 Partial fix · 0.149.0 CWE-674

TI-2026-74663 CVE-2026-100352 · GHSA-rj39-cv6w-8wv7

YAML NaN and Inf values cause panic in kin-openapi validation

HIGH 72

kin-openapi is a Go project for handling OpenAPI files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00595 Published 2026-10-15 Partial fix · 0.148.0 CWE-754

TI-2026-74649 CVE-2026-100351 · GHSA-23vg-4cjm-66q5

Authentication bypass in kin-openapi via encoded URL paths

HIGH 68

kin-openapi is a Go project for handling OpenAPI files.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00488 Published 2026-10-15 Fixed in 0.147.0 CWE-289

TI-2026-74803 CVE-2026-100349 · GHSA-74vm-87hj-r66f

Nil pointer panic in kin-openapi response header validation

LOW 36

kin-openapi is a Go project for handling OpenAPI files.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00472 Published 2026-10-15 Partial fix · 0.146.0 CWE-476

TI-2026-74658 CVE-2026-100350 · GHSA-h4r5-mxv5-8mjc

Repeated regexp compilation in kin-openapi deepObject query decoding

MEDIUM 63

kin-openapi is a Go project for handling OpenAPI files.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00451 Published 2026-10-15 Fixed in 0.146.0 CWE-1050

TI-2026-74655 CVE-2026-100347 · GHSA-fh4f-47mf-f2gj

Panic in kin-openapi legacy router from unsupported HTTP method

MEDIUM 63

kin-openapi is a Go project for handling OpenAPI files.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00515 Published 2026-10-15 Partial fix · 0.145.0 CWE-20

TI-2026-74660 CVE-2026-100348 · GHSA-mh7x-f8wq-4jhx

Nil pointer panic in kin-openapi loader on self-referential ref

LOW 30

kin-openapi is a Go project for handling OpenAPI files.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00372 Published 2026-10-15 Partial fix · 0.145.0 CWE-476

TI-2026-74661 CVE-2026-97394 · GHSA-p6wj-qrr4-pgh5

kin-openapi nil pointer panic in openapi3filter on array schemas without items

HIGH 72

kin-openapi is a Go project for handling OpenAPI files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00615 Published 2026-10-15 Fixed in 0.143.0 CWE-248

TI-2026-53976 CVE-2026-77354 · GHSA-xhj3-7xw9-vr34

kin-openapi: Uncontrolled resource consumption in openapi3filter deepObject query parameter decoding

HIGH 77

kin-openapi is a Go project for handling OpenAPI files.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00524 Published 2026-08-21 Partial fix · 0.142.0 CWE-400

TI-2026-53730 CVE-2026-76905 · GHSA-mmfr-pmjx-hw9w

NULL pointer dereference in getkin kin-openapi

HIGH 72

kin-openapi is a Go project for handling OpenAPI files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00609 Published 2026-08-21 Partial fix · 0.141.0 CWE-476

TI-2026-51614 CVE-2026-73502 · GHSA-jpcw-4wr7-c3vq

NULL pointer dereference in getkin kin-openapi

MEDIUM 57

kin-openapi is a Go project for handling OpenAPI files.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00507 Published 2026-08-18 Partial fix · 0.144.0 CWE-476

TI-2026-51613 CVE-2026-73501

kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default

HIGH 80

kin-openapi is a Go project for handling OpenAPI files.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00426 Published 2026-08-12 Partial fix · 0.144.0 CWE-287

TI-2025-21492 CVE-2025-30153 · GHSA-wq9g-9vfc-cfq9

Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter

HIGH 72

kin-openapi is a Go project for handling OpenAPI files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00621 Published 2025-03-19 Partial fix · 0.131.0 CWE-409

Vulnerabilities

Filters