github.com/getkin/kin-openapi vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-100349Highgithub.com/getkin/kin-openapi: kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content CVE-2026-100353Highgithub.com/getkin/kin-openapi: kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter CVE-2026-100354Highgithub.com/getkin/kin-openapi: kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash CVE-2026-100352Highgithub.com/getkin/kin-openapi: kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path CVE-2026-100351Highgithub.com/getkin/kin-openapi: kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion CVE-2026-100350Mediumgithub.com/getkin/kin-openapi: kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression CVE-2026-100348Mediumgithub.com/getkin/kin-openapi: kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)CVE-2026-100347Mediumgithub.com/getkin/kin-openapi: kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path CVE-2026-97394Highgithub.com/getkin/kin-openapi: kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items CVE-2026-77354Highgithub.com/getkin/kin-openapi: kin-openapi has uncontrolled resource consumption in openapi3filter deepObject query parameter decoding CVE-2026-76905Highgithub.com/getkin/kin-openapi: kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS CVE-2026-73502Mediumgithub.com/getkin/kin-openapi: kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has…GHSA-R277-6W6Q-XMQWCriticalgithub.com/getkin/kin-openapi: kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default CVE-2025-30153Highgithub.com/getkin/kin-openapi: Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo