golang-github-getkin-kin-openapi vulnerabilities (Debian)
10 vulnerabilities.
-
golang-github-getkin-kin-openapiDebian kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash 7.5 High -
golang-github-getkin-kin-openapiDebian kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path 7.5 High -
golang-github-getkin-kin-openapiDebian kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content 8.2 High -
golang-github-getkin-kin-openapiDebian kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS) 5.3 Medium -
golang-github-getkin-kin-openapiDebian kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path 5.3 Medium -
golang-github-getkin-kin-openapiDebian kin-openapi: Uncontrolled resource consumption in openapi3filter deepObject query parameter decoding 8.7 High -
golang-github-getkin-kin-openapiDebian kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS 7.5 High -
golang-github-getkin-kin-openapiDebian kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema 5.3 Medium -
golang-github-getkin-kin-openapiDebian kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default 9.1 Critical -
golang-github-getkin-kin-openapiDebian Improper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filter 7.5 High