github.com/getkin/kin-openapi: kin-openapi: Authentication bypass via URL path decoding discrepancy

A flaw was found in kin-openapi. An unauthenticated remote attacker can bypass authentication checks on protected routes by sending requests containing encoded path separators. This issue occurs because the request validation handler inspects the decoded URL path, while certain downstream routers...