WS-2026-0044

Denial of service and SSRF via unbounded http.Get in Ref.IsValidURI in github.com/go-openapi/spec. IsValidURI resolved an absolute-URL $ref by issuing http.Get on http.DefaultClient, which has no timeout and no cancellation, so an attacker-controlled URL that never responds blocks indefinitely an...