Vulnerability GO-2026-6795
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
9 hours ago
November 05, 2026 at 10:53 PM UTC
kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path in github.com/getkin/kin-openapi
<0.148.0
<0.148.0
Summary
kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path in github.com/getkin/kin-openapi
Details
kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path in github.com/getkin/kin-openapi
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
9 hours ago
kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion in github.com/getkin/kin-openapi
>=0.144.0 <0.147.0 GO-2026-6769
>=0.144.0 <0.147.0 GO-2026-6769
Unknown
9 hours ago
kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path in github.com/getkin/kin-openapi
<0.145.0 GO-2026-6783
<0.145.0 GO-2026-6783
Unknown
9 hours ago
kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash in github.com/getkin/kin-openapi
<0.149.0 GO-2026-6785
<0.149.0 GO-2026-6785
Unknown
9 hours ago
kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression in github.com/getkin/kin-openapi
>=0.145.0 <0.146.0 GO-2026-6787
>=0.145.0 <0.146.0 GO-2026-6787
Unknown
9 hours ago
kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS) in github.com/getkin/kin-openapi
<0.145.0 GO-2026-6789
<0.145.0 GO-2026-6789
Impacted packages
Timeline
Published
9 hours ago
November 05, 2026 at 10:53 PM UTC
Fixed (v0.148.0)
2 months ago
August 27, 2026 at 10:09 AM UTC
Last Modified
8 hours ago
November 05, 2026 at 11:15 PM UTC