tocsin

CVE-2026-77354

2 advisories.

Go/github.com/getkin/kin-openapi CVE-2026-77354: high, EPSS 0.52%

kin-openapi has uncontrolled resource consumption in openapi3filter deepObject query parameter decoding

Action: Upgrade github.com/getkin/kin-openapi to 0.142.0 or later.

go get github.com/getkin/kin-openapi@v0.142.0

Affected

introducedfixedlast affected
0.124.00.142.0-

Fixed versions

0.142.0

Sources

CVE-2026-77354 · published · modified · JSON

Go/github.com/getkin/kin-openapi CVE-2026-77354: unknown, EPSS 0.52%

kin-openapi has uncontrolled resource consumption in openapi3filter deepObject query parameter decoding in github.com/getkin/kin-openapi

Action: Upgrade github.com/getkin/kin-openapi to 0.142.0 or later.

go get github.com/getkin/kin-openapi@v0.142.0

Affected

introducedfixedlast affected
0.124.00.142.0-

Fixed versions

0.142.0

Sources

CVE-2026-77354 · published · modified · JSON