2 matches found
github.com/getkin/kin-openapi: kin-openapi: Denial of Service via improper handling of non-finite numeric values
A flaw was found in kin-openapi. A remote, unauthenticated attacker can exploit this vulnerability by submitting a specially crafted YAML request containing non-finite numeric values, such as Not-a-Number or infinity, to an endpoint with numeric constraints. Because the validation process fails t...
github.com/getkin/kin-openapi: kin-openapi: Denial of Service via improper handling of non-finite numeric values
A flaw was found in kin-openapi. A remote, unauthenticated attacker can exploit this vulnerability by submitting a specially crafted YAML request containing non-finite numeric values, such as Not-a-Number or infinity, to an endpoint with numeric constraints. Because the validation process fails t...