Go/github.com/getkin/kin-openapi CVE-2026-77354: high, EPSS 0.52%
kin-openapi has uncontrolled resource consumption in openapi3filter deepObject query parameter decoding
Action: Upgrade github.com/getkin/kin-openapi to 0.142.0 or later.
go get github.com/getkin/kin-openapi@v0.142.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.124.0 | 0.142.0 | - |
Fixed versions
| 0.142.0 |
Sources
- osv: GHSA-xhj3-7xw9-vr34
- https://github.com/getkin/kin-openapi/security/advisories/GHSA-xhj3-7xw9-vr34
- https://github.com/getkin/kin-openapi/commit/1223a0f215d2cf9beb2d9eb9ea2649d001c21388
- https://github.com/getkin/kin-openapi
- https://github.com/getkin/kin-openapi/releases/tag/v0.142.0
CVE-2026-77354 · published · modified · JSON