github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unbounded recursion during schema validation

A flaw was found in kin-openapi. The runtime schema validation lacks cycle detection when processing circular schema references. A remote attacker can exploit this vulnerability by submitting a request or response that triggers recursive validation, leading to unbounded recursion and stack...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in request decoding

A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service DoS by sending specially crafted HTTP requests containing specific array query parameters or form-encoded data. Because the request decoder fails to properly validate certain array schemas before...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via improper handling of non-finite numeric values

A flaw was found in kin-openapi. A remote, unauthenticated attacker can exploit this vulnerability by submitting a specially crafted YAML request containing non-finite numeric values, such as Not-a-Number or infinity, to an endpoint with numeric constraints. Because the validation process fails t...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unbounded recursion during schema validation

A flaw was found in kin-openapi. The runtime schema validation lacks cycle detection when processing circular schema references. A remote attacker can exploit this vulnerability by submitting a request or response that triggers recursive validation, leading to unbounded recursion and stack...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in request decoding

A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service DoS by sending specially crafted HTTP requests containing specific array query parameters or form-encoded data. Because the request decoder fails to properly validate certain array schemas before...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via improper handling of non-finite numeric values

A flaw was found in kin-openapi. A remote, unauthenticated attacker can exploit this vulnerability by submitting a specially crafted YAML request containing non-finite numeric values, such as Not-a-Number or infinity, to an endpoint with numeric constraints. Because the validation process fails t...

CLEANSTART-2026-OD40775 kin-openapi is a Go project for handling OpenAPI files

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

CLEANSTART-2026-RK72601 kin-openapi is a Go project for handling OpenAPI files

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

CLEANSTART-2026-ZP83138 kin-openapi is a Go project for handling OpenAPI files

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

CLEANSTART-2026-MH48139 kin-openapi is a Go project for handling OpenAPI files

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

CLEANSTART-2026-KH25643 kin-openapi is a Go project for handling OpenAPI files

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

CLEANSTART-2026-IX43847 kin-openapi is a Go project for handling OpenAPI files

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

PT-2026-135212

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

PT-2026-135148

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

PT-2026-135125

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

PT-2026-135145

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

PT-2026-135177

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

PT-2026-135133

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

kin-openapi Openapi3filter DoS

The vulnerability of the openapi3filter.ValidateResponse function in the kin-openapi library is related to pointer aliasing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via self-referential schema definitions

A flaw was found in kin-openapi. A remote attacker could cause a Denial of Service DoS by providing a specially crafted OpenAPI document containing self-referential schema definitions. During parsing, an uninitialized reference causes the application to terminate unexpectedly prior to document...