01 Record

CVE-2026-77354

kin-openapi: Uncontrolled resource consumption in openapi3filter deepObject query parameter decoding

HighPUBLISHEDCNA: GitHub_M

Base score8.7 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

02 Description

kin-openapi: Uncontrolled resource consumption in openapi3filter deepObject query parameter decoding

Published

2026-08-21 20:44Z4 HR AGO

Last updated

2026-08-21 20:44Z4 HR AGO

Reserved

2026-08-20

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

High (CVSS 8.7)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Weaknesses

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

37718d26d2e59ef1ff33675ff92489dc96c8f4ae5dc4aa3078d616d608c05e13

VendorProductVersionsPlatforms

getkinkin-openapi>= 0.124.0, < 0.142.0—