Vulnerability GO-2026-6769
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
9 hours ago
November 05, 2026 at 10:53 PM UTC
kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion in github.com/getkin/kin-openapi
>=0.144.0 <0.147.0
>=0.144.0 <0.147.0
Summary
kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion in github.com/getkin/kin-openapi
Details
kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion in github.com/getkin/kin-openapi
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
9 hours ago
kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path in github.com/getkin/kin-openapi
<0.145.0 GO-2026-6783
<0.145.0 GO-2026-6783
Unknown
9 hours ago
kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash in github.com/getkin/kin-openapi
<0.149.0 GO-2026-6785
<0.149.0 GO-2026-6785
Unknown
9 hours ago
kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression in github.com/getkin/kin-openapi
>=0.145.0 <0.146.0 GO-2026-6787
>=0.145.0 <0.146.0 GO-2026-6787
Unknown
9 hours ago
kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS) in github.com/getkin/kin-openapi
<0.145.0 GO-2026-6789
<0.145.0 GO-2026-6789
Unknown
9 hours ago
kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items in github.com/getkin/kin-openapi
>=0.136.0 <0.143.0 GO-2026-6790
>=0.136.0 <0.143.0 GO-2026-6790
Impacted packages
Timeline
Published
9 hours ago
November 05, 2026 at 10:53 PM UTC
Fixed (v0.147.0)
2 months ago
August 18, 2026 at 02:12 PM UTC
Last Modified
8 hours ago
November 05, 2026 at 11:15 PM UTC