Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2026/10/15 8:15 p.m.•3 views

kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)

The defect ---------- Confirmed at HEAD f0407d5, v0.144.0. openapi3/loader.go, inside resolveComponent's drill closure around line 455, the case SchemaRef branch for pathPart == "additionalProperties" dereferences c.Value.AdditionalProperties with no nil-check on c.Value: case SchemaRef: if...

5.3CVSS5.8AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder