CVE-2026-100348 kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3.Loader can dereference a nil SchemaRef.Value while resolving a self-referential additionalProperties JSON Reference such as a schema that points to its own additionalProperties member. Loading an attacker-controlle...

EUVD-2026-102151

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3.Loader can dereference a nil SchemaRef.Value while resolving a self-referential additionalProperties JSON Reference such as a schema that points to its own additionalProperties member. Loading an attacker-controlle...

qt:qtbase_gui_image_qimage_loadfromdata: Heap-use-after-free in QString::QString

Detailed Report: https://oss-fuzz.com/testcase?key=5050369662910464 Project: qt Fuzzing Engine: libFuzzer Fuzz Target: qtbaseguiimageqimageloadfromdata Job Type: libfuzzerasanqt Platform Id: linux Crash Type: Heap-use-after-free READ Crash Address: 0x607000003c20 Crash State: QString::QString...