1 matches found
kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter
Summary The fix for GHSA-p6wj-qrr4-pgh5 addressed a nil-pointer dereference that occurs when an OpenAPI 3.1 array schema omits the items keyword which is legal under JSON Schema 2020-12. That fix patched three decoder paths: the standalone parseArray function, the top-level array check in...
7.5CVSS5.6AI score
SaveExploits0References5Affected Software1
20