Lucene search
+L

182 matches found

osv_ghsa
osv_ghsa
•added 2026/10/15 8:19 p.m.•7 views

GHSA-23VG-4CJM-66Q5 kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion

Summary openapi3filter.ValidationHandler.Middleware validates requests with kin-openapi's legacy router, which selects an OpenAPI operation from the decoded URL.Path. The method is documented as implementing gorilla/mux.MiddlewareFunc, but a downstream gorilla/mux router configured with...

7.4CVSS6AI score0.00488EPSS
SaveExploits0References5
Rows per page
Query Builder