Vulnerabilities
Last updated 2 hours ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path | Medium Risk 5.3 | 7 hours ago | 7 hours ago |
|
|
kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path | High Risk 7.5 | 7 hours ago | 7 hours ago |
|
|
kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression | Medium Risk 5.3 | 7 hours ago | 7 hours ago |
|
|
kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS) | Medium Risk 5.3 | 7 hours ago | 7 hours ago |
|
|
kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items | High Risk 7.5 | 7 hours ago | 7 hours ago |
|
|
kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion | High Risk 7.4 | 7 hours ago | 7 hours ago |
|
|
kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash | High Risk 7.5 | 7 hours ago | 7 hours ago |
|
|
kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter | High Risk 7.5 | 7 hours ago | 7 hours ago |
|
|
kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS | High Risk 7.5 | 1 month ago | 1 month ago |
|
|
kin-openapi has uncontrolled resource consumption in openapi3filter deepObject query parameter decoding | High Risk 8.0 | 1 month ago | 1 month ago |
|
|
kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default | Critical 9.1 | 2 months ago | 1 month ago |
|
|
Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter | High Risk 7.5 | 1 year ago | 1 month ago |
|
|
kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema | Medium Risk 5.3 | 2 months ago | 1 month ago |
|
|
Authentication bypass via default NoopAuthenticationFunc in github.com/getkin/kin-openapi | Unknown | 1 month ago | 1 month ago |
|
|
Nil-pointer panic on content parameter without schema in github.com/getkin/kin-openapi | Unknown | 1 month ago | 1 month ago |
|
|
kin-openapi has uncontrolled resource consumption in openapi3filter deepObject query parameter decoding in github.com/getkin/kin-openapi | Unknown | 1 month ago | 1 month ago |
|
|
kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS in github.com/getkin/kin-openapi | Unknown | 1 month ago | 1 month ago |
|
|
Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter | Unknown | 1 year ago | 8 months ago |
Page 1