kin-openapi visitJSON DoS

The vulnerability of the visitJSON component in the file handling library for kin-openapi files is related to improper handling of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the visitJSON and decodeValue functions when processing schemas with circular references in allOf, anyOf, or oneOf combinators. An attacker can cause a fatal process crash by submitting a crafted OpenAPI...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the visitJSON and decodeValue functions when processing schemas with circular references in allOf, anyOf, or oneOf combinators. An attacker can cause a fatal process crash by submitting a crafted OpenAPI...

PT-2026-115010

Name of the Vulnerable Software and Affected Versions kin-openapi versions prior to 0.149.0 Description Runtime request, response, and direct schema validation lack cycle detection when an allOf, anyOf, or oneOf chain refers back to an ancestor schema. While loading and document validation accept...

PT-2026-120363

Уязвимость компонента visitJSON библиотеки для работы с файлами kin-openapi связана с некорректной обработкой необычных или исключительных состояний. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...