Product by Go
Github.com/getkin/kin-openapi
14 known vulnerabilities in Github.com/getkin/kin-openapi (Go), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-97394 | Getkin Kin-openapi: Uncaught Exception | 7.5 | |
| High | CVE-2026-100352 | kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path | 7.5 | |
| High | CVE-2026-77354 | kin-openapi: Uncontrolled resource consumption in openapi3filter deepObject query parameter decoding | — | |
| High | CVE-2026-100351 | kin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusion | 7.4 | |
| High | CVE-2026-76905 | Getkin Kin-openapi: NULL Pointer Dereference | 7.5 | |
| Critical | CVE-2026-73501 | Getkin Kin-openapi: Improper Authentication | 9.1 | |
| High | CVE-2026-100354 | kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash | 7.5 | |
| High | CVE-2026-100349 | Getkin Kin-openapi: NULL Pointer Dereference | — | |
| High | CVE-2026-100353 | Getkin Kin-openapi: NULL Pointer Dereference | 7.5 | |
| Medium | CVE-2026-100347 | Getkin Kin-openapi: Uncaught Exception | 5.3 | |
| Medium | CVE-2026-100350 | kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression | 5.3 | |
| High | CVE-2025-30153 | Getkin Kin-openapi: Improper Handling of Highly Compressed Data (Data Amplification) | 7.5 | |
| Medium | CVE-2026-73502 | Getkin Kin-openapi: NULL Pointer Dereference | 5.3 | |
| Medium | CVE-2026-100348 | kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS) | 5.3 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 32sans-atrisk-mail,