CVE-2026-100352

The kin-openapi Go project (prior to version 0.148.0 ) is vulnerable to a denial-of-service condition during OpenAPI 3.1 validation . The root cause is that the validation path passes YAML NaN and infinity numeric values (.nan, .inf, -.inf) to the santhosh-tekuri/jsonschema v6.0.2 dependency with...