Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

kin-openapi — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in kin-openapi, with AI-generated Chinese analysis, references, and POCs.

Vendor: getkin

CVE ID Title CVSS Severity Published
CVE-2026-100353 kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter CWE-476 7.5 High 2026-10-15
CVE-2026-100354 kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash CWE-674 7.5 High 2026-10-15
CVE-2026-100352 kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path CWE-754 7.5 High 2026-10-15
CVE-2026-100351 kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion CWE-289 7.4 High 2026-10-15
CVE-2026-100349 kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content CWE-476 8.2 High 2026-10-15
CVE-2026-100350 kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression CWE-400 5.3 Medium 2026-10-15
CVE-2026-100347 kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path CWE-20 5.3 Medium 2026-10-15
CVE-2026-100348 kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS) CWE-476 5.3 Medium 2026-10-15
CVE-2026-97394 kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items CWE-248 7.5 High 2026-10-15
CVE-2026-77354 kin-openapi: Uncontrolled resource consumption in openapi3filter deepObject query parameter decoding CWE-400 8.7 High 2026-08-21
CVE-2026-76905 kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS CWE-476 7.5 High 2026-08-21
CVE-2026-73502 kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema CWE-476 5.3 Medium 2026-08-18
CVE-2026-73501 kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default CWE-287 9.1 Critical 2026-08-12
CVE-2025-30153 Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter CWE-409 7.5 High 2025-03-19

All 14 known CVE vulnerabilities affecting kin-openapi with full Chinese analysis, references, and POCs where available.