CVE-2026-97394

The kin-openapi Go project (versions 0.136.0 through 0.143.0 ) contains a nil-pointer dereference vulnerability in the openapi3filter component. This occurs when the application processes OpenAPI 3.1 array schemas that lack the items keyword. During the decoding of application/x-www-form-urlencod...