CVE-2026-73501

creationtimestamp| type| source ---|---|--- 2026-08-12 22:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msw74epkjn2b 2026-08-12 23:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mswaavudbs2t...

CVE-2026-73501

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load in openapi3filter/validationhandler.go silently replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which returns nil without checking credentials. This substitution causes every OpenAPI...

CVE-2026-73501 kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load in openapi3filter/validationhandler.go silently replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which returns nil without checking credentials. This substitution causes every OpenAPI...

CVE-2026-73501

kin-openapi vulnerability CVE-2026-73501: prior to v0.144.0, ValidationHandler.Load() silently replaced a nil AuthenticationFunc with NoopAuthenticationFunc, which returns nil and does not verify credentials. This leads to every OpenAPI security requirement being satisfied for unauthenticated req...