9 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-100348
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3.Loader can dereference a nil SchemaRef.Value while resolving a self-referenti...
DEBIAN-CVE-2026-100348
kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3.Loader can dereference a nil SchemaRef.Value while resolving a self-referential additionalProperties JSON Reference such as a schema that points to its own additionalProperties member. Loading an attacker-controlle...
CVE-2026-100348
kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3.Loader can dereference a nil SchemaRef.Value while resolving a self-referential additionalProperties JSON Reference such as a schema that points to its own additionalProperties member. Loading an attacker-controlle...
PT-2026-114979
Name of the Vulnerable Software and Affected Versions kin-openapi versions prior to 0.145.0 Description Loading an attacker-controlled OpenAPI document through LoadFromData, LoadFromFile, or LoadFromURI can cause the loading process to panic. This occurs because the openapi3.Loader can dereferenc...
CVE-2026-100680
Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary local files. Attackers with builder access can embed file:// references in OpenAPI specifications submitted to the import...
UBUNTU-CVE-2026-73148
GHSA-6wgq-wg3w-jgvx: svxreflector: use-after-free write via dangling JSON reference...
CVE-2026-73148
GHSA-6wgq-wg3w-jgvx: svxreflector: use-after-free write via dangling JSON reference...
