Lucene search
+L

46 matches found

osv_ghsa
osv_ghsa
•added 2026/07/24 4:52 p.m.•23 views

GHSA-R277-6W6Q-XMQW kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default

Summary ValidationHandler.Load in getkin/kin-openapi silently replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which always returns nil without performing any credential check. Because this substitution happens unconditionally when the caller omits the field, every OpenAPI security...

9.1CVSS6.2AI score0.00426EPSS
SaveExploits0References4
Rows per page
Query Builder