kin

A new foundation for code. Kin is a graph-native code repository for AI agents and the people who build with them. It stores source, recorded code relationships, and versioned history as repository state. The graph is the repository model, not a search index maintained beside another repository...

CLEANSTART-2026-IX43847 kin-openapi is a Go project for handling OpenAPI files

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

CLEANSTART-2026-RK72601 kin-openapi is a Go project for handling OpenAPI files

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

CLEANSTART-2026-ZP83138 kin-openapi is a Go project for handling OpenAPI files

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

CLEANSTART-2026-OD40775 kin-openapi is a Go project for handling OpenAPI files

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

CLEANSTART-2026-KH25643 kin-openapi is a Go project for handling OpenAPI files

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

CLEANSTART-2026-MH48139 kin-openapi is a Go project for handling OpenAPI files

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

kin-openapi Openapi3filter DoS

The vulnerability of the openapi3filter.ValidateResponse function in the kin-openapi library is related to pointer aliasing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unsupported HTTP methods on static paths

A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service DoS by sending requests with unsupported or non-canonical HTTP methods to an existing static path. Because the application encounters an unhandled panic before authentication is evaluated, these...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via self-referential schema definitions

A flaw was found in kin-openapi. A remote attacker could cause a Denial of Service DoS by providing a specially crafted OpenAPI document containing self-referential schema definitions. During parsing, an uninitialized reference causes the application to terminate unexpectedly prior to document...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil pointer dereference in response validation

A flaw was found in kin-openapi. This vulnerability allows an attacker to cause a Denial of Service DoS by triggering an application crash during response validation. When an OpenAPI specification declares a response header using content rather than a schema, the validation logic attempts to...

github.com/getkin/kin-openapi: kin-openapi: Authentication bypass via URL path decoding discrepancy

A flaw was found in kin-openapi. An unauthenticated remote attacker can bypass authentication checks on protected routes by sending requests containing encoded path separators. This issue occurs because the request validation handler inspects the decoded URL path, while certain downstream routers...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unbounded recursion during schema validation

A flaw was found in kin-openapi. The runtime schema validation lacks cycle detection when processing circular schema references. A remote attacker can exploit this vulnerability by submitting a request or response that triggers recursive validation, leading to unbounded recursion and stack...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via improper handling of non-finite numeric values

A flaw was found in kin-openapi. A remote, unauthenticated attacker can exploit this vulnerability by submitting a specially crafted YAML request containing non-finite numeric values, such as Not-a-Number or infinity, to an endpoint with numeric constraints. Because the validation process fails t...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in request decoding

A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service DoS by sending specially crafted HTTP requests containing specific array query parameters or form-encoded data. Because the request decoder fails to properly validate certain array schemas before...

kin-openapi Validation Handler Bypass

The vulnerability of the openapi3filter.ValidationHandler.Middleware function in the kin-openapi library relates to bypassing authentication using an alternative path when processing the UseEncodedPath parameter. Exploiting this vulnerability could allow a malicious actor to circumvent existing...

kin-openapi UrlencodedBodyDecoder DoS

The vulnerability of the UrlencodedBodyDecoder component in the kin-openapi library relates to bypassing authentication using an alternative name. Exploiting this vulnerability could allow a malicious actor to cause service failures...

kin-openapi visitJSON DoS

The vulnerability of the visitJSON component in the file handling library for kin-openapi files is related to improper handling of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...

kin-openapi parseArray UrlencodedBodyDecoder MultipartBodyDecoder DoS

The vulnerability of the parseArray, UrlencodedBodyDecoder, and MultipartBodyDecoder functions in the kin-openapi library is related to errors in pointer manipulation when processing the deepObject parameter. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2026-100348

A flaw was found in kin-openapi. A remote attacker could cause a Denial of Service DoS by providing a specially crafted OpenAPI document containing self-referential schema definitions. During parsing, an uninitialized reference causes the application to terminate unexpectedly prior to document...