Go/github.com/getkin/kin-openapi CVE-2026-73502: medium 5.3, EPSS 0.51%
kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema
Action: Upgrade github.com/getkin/kin-openapi to 0.144.0 or later.
go get github.com/getkin/kin-openapi@v0.144.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.144.0 | - |
Fixed versions
| 0.144.0 |
Sources
- osv: GHSA-jpcw-4wr7-c3vq
- https://github.com/getkin/kin-openapi/security/advisories/GHSA-jpcw-4wr7-c3vq
- https://github.com/getkin/kin-openapi/commit/68ac2affa325514d7d6e731204d6a1edf6bdff64
- https://github.com/getkin/kin-openapi
- https://github.com/getkin/kin-openapi/releases/tag/v0.144.0
CVE-2026-73502 · published · modified · JSON