CVE record · 1 source
CVE-2026-100352
CVSS 7.5kin-openapi is a Go project for handling OpenAPI files.
- CVSS
- 7.5
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
kin-openapi is a Go project for handling OpenAPI files.
kin-openapi is a Go project for handling OpenAPI files. Prior to 0.148.0, the OpenAPI 3.1 validation path passes YAML NaN and infinity numeric values to santhosh-tekuri/jsonschema v6.0.2 without applying kin-openapi's existing…