getkin vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 202613

Newest CVEs

• CVE-2026-100353

  kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter

  getkin · kin-openapi

  High7.5
• CVE-2026-100354

  kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash

  getkin · kin-openapi

  High7.5
• CVE-2026-100352

  kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path

  getkin · kin-openapi

  High7.5
• CVE-2026-100351

  kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion

  getkin · kin-openapi

  High7.4
• CVE-2026-100349

  kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content

  getkin · kin-openapi

  High8.2
• CVE-2026-100350

  kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression

  getkin · kin-openapi

  Medium5.3
• CVE-2026-100347

  kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path

  getkin · kin-openapi

  Medium5.3
• CVE-2026-100348

  kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)

  getkin · kin-openapi

  Medium5.3
• CVE-2026-97394

  kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items

  getkin · kin-openapi

  High7.5
• CVE-2026-77354

  kin-openapi: Uncontrolled resource consumption in openapi3filter deepObject query parameter decoding

  getkin · kin-openapi

  High8.7