GE
Vendor
getkin
14
CVEs
0
On KEV
9
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-100353 | KI kin-openapi getkin | 7.5 | Oct 15 | kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter |
| CVE-2026-100354 | KI kin-openapi getkin | 7.5 | Oct 15 | kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash |
| CVE-2026-100352 | KI kin-openapi getkin | 7.5 | Oct 15 | kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path |
| CVE-2026-100351 | KI kin-openapi getkin | 7.4 | Oct 15 | kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion |
| CVE-2026-100349 | KI kin-openapi getkin | 8.2 | Oct 15 | kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content |
| CVE-2026-100350 | KI kin-openapi getkin | 5.3 | Oct 15 | kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression |
| CVE-2026-100347 | KI kin-openapi getkin | 5.3 | Oct 15 | kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path |
| CVE-2026-100348 | KI kin-openapi getkin | 5.3 | Oct 15 | kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS) |
| CVE-2026-97394 | KI kin-openapi getkin | 7.5 | Oct 15 | kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items |
| CVE-2026-77354 | KI kin-openapi getkin | 8.7 | Aug 21 | kin-openapi: Uncontrolled resource consumption in openapi3filter deepObject query parameter decoding |
| CVE-2026-76905 | KI kin-openapi getkin | 7.5 | Aug 21 | kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS |
| CVE-2026-73502 | KI kin-openapi getkin | 5.3 | Aug 18 | kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema |
| CVE-2026-73501 | KI kin-openapi getkin | 9.1 | Aug 12 | kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default |
| CVE-2025-30153 | KI kin-openapi getkin | 7.5 | Mar 19 | Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter |