Lucene search
+L

1 matches found

osv_ghsa
osv_ghsa
•added 2026/10/15 8:20 p.m.•6 views

GHSA-G8CF-RCJF-C8CF kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash

Summary kin-openapi's spec loader and spec-time validator both handle circular schema references safely: the loader resolves circular $refs on purpose to support recursive data structures, and Schema.validate uses stack-based cycle detection. Validate therefore accepts a schema whose allOf / anyO...

7.5CVSS6AI score0.00435EPSS
SaveExploits0References5
Rows per page
Query Builder