Vulnerabilidades em getkin
14 resultadosAnálise Vexday
O fornecedor getkin apresenta uma exposição mínima com apenas 1 CVE registrado na base e nenhuma vulnerabilidade sob ataque ativo. A fraqueza identificada (CWE-409) não revela criticidade elevada, e a ausência de publicações recentes indica que o risco não é contemporâneo. O perfil geral sugere baixo impacto de segurança neste momento.
CVE-2025-30153HIGHImproper Handling of Highly Compressed Data (Data Amplification) in github.com/getkin/kin-openapi/openapi3filterEPSS 0.6%CVE-2026-97394HIGHkin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing itemsEPSS 0.6%CVE-2026-76905HIGHkin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoSEPSS 0.6%CVE-2026-100352HIGHkin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation PathEPSS 0.6%CVE-2026-77354HIGHkin-openapi: Uncontrolled resource consumption in openapi3filter deepObject query parameter decodingEPSS 0.5%CVE-2026-100347MEDIUMkin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static pathEPSS 0.5%CVE-2026-73502MEDIUMkin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schemaEPSS 0.5%CVE-2026-100351HIGHkin-openapi: ValidationHandler security-requirement bypass via encoded-path operation confusionEPSS 0.5%CVE-2026-100349HIGHkin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with contentEPSS 0.5%CVE-2026-100350MEDIUMkin-openapi deepObject query decoding repeatedly compiles an invariant regular expressionEPSS 0.5%CVE-2026-100354HIGHkin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process CrashEPSS 0.4%CVE-2026-73501CRITICALkin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc DefaultEPSS 0.4%CVE-2026-100348MEDIUMkin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)EPSS 0.4%CVE-2026-100353HIGHkin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filterEPSS 0.3%