KI
Product
kin-openapi
14
CVEs
0
On KEV
9.1
Max CVSS
9
New 30D
Severity mix
Critical 1High 9Medium 4Low 0
Watch
Add kin-openapi to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77354 | 8.7 | Aug 21 | kin-openapi: Uncontrolled resource consumption in openapi3filter deepObject query parameter decoding Affected: >= 0.124.0, < 0.142.0 |
| CVE-2026-100349 | 8.2 | Oct 15 | kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content Affected: < 0.146.0 |
| CVE-2026-100353 | 7.5 | Oct 15 | kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter Affected: >= 0.136.0, < 0.149.0 |
| CVE-2026-100354 | 7.5 | Oct 15 | kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash Affected: < 0.149.0 |
| CVE-2026-100352 | 7.5 | Oct 15 | kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path Affected: < 0.148.0 |
| CVE-2026-97394 | 7.5 | Oct 15 | kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items Affected: >= 0.136.0, < 0.143.0 |
| CVE-2026-76905 | 7.5 | Aug 21 | kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS Affected: >= 0.10.0, < 0.141.0 |
| CVE-2025-30153 | 7.5 | Mar 19 | Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter Affected: < 0.131.0 |
| CVE-2026-100351 | 7.4 | Oct 15 | kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion Affected: >= 0.144.0, < 0.147.0 |
Showing 9