CVE-2026-72923 Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion

The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the model. In Microsoft.OpenApi.Readers versions before 1.6.30 and Microsoft.OpenApi.YamlReader from 2.0.0-preview.11 through 2.11.0 a...

CVE-2026-72923 Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion

The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the model. In Microsoft.OpenApi.Readers versions before 1.6.30 and Microsoft.OpenApi.YamlReader from 2.0.0-preview.11 through 2.11.0 a...

CVE-2026-72923: Uncontrolled Resource Consumption

The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the model. In Microsoft.OpenApi.Readers versions before 1.6.30 and Microsoft.OpenApi.YamlReader from 2.0.0-preview.11 through 2.11.0 a...

PT-2026-87843

Name of the Vulnerable Software and Affected Versions Microsoft.OpenApi.YamlReader versions 2.0.0-preview.11 through 2.11.x Microsoft.OpenApi.YamlReader versions 3.0.0 through 3.9.x Microsoft.OpenApi.Readers versions prior to 1.6.30 Description Uncontrolled resource consumption occurs when parsin...