GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
6 advisories
kin-openapi deepObject query decoding repeatedly compiles an invariant regular expression
Moderate
CVE-2026-100350
was published
for
github.com/getkin/kin-openapi
(Go)
Oct 15, 2026
kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items
High
CVE-2026-97394
was published
for
github.com/getkin/kin-openapi
(Go)
Oct 15, 2026
gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers
High
CVE-2026-84445
was published
for
google.golang.org/grpc
(Go)
Sep 8, 2026
kin-openapi has uncontrolled resource consumption in openapi3filter deepObject query parameter decoding
High
CVE-2026-77354
was published
for
github.com/getkin/kin-openapi
(Go)
Aug 21, 2026
kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS
High
CVE-2026-76905
was published
for
github.com/getkin/kin-openapi
(Go)
Aug 21, 2026
kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema
Moderate
CVE-2026-73502
was published
for
github.com/getkin/kin-openapi
(Go)
Jul 24, 2026
ProTip!
Advisories are also available from the
GraphQL API