CVE-2026-100348

kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3.Loader can dereference a nil SchemaRef.Value while resolving a self-referential additionalProperties JSON Reference such as a schema that points to its own additionalProperties member. Loading an attacker-controlled OpenAPI document through LoadFromData, LoadFromFile, or LoadFromURI reaches resolveComponent before document validation and can panic the loading process. Resolved additionalProperties schemas and ordinary recursive schemas do not take the vulnerable nil-value path. This issue is fixed in version 0.145.0.

• CWE-476

• https://github.com/getkin/kin-openapi/commit/88aa64c7cbd03ecadbb419c473bdcaa8b0124c6b
• https://github.com/getkin/kin-openapi/releases/tag/v0.145.0
• https://github.com/getkin/kin-openapi/security/advisories/GHSA-mh7x-f8wq-4jhx

Published

Oct 15, 2026

Last Modified

Oct 15, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-100315A vulnerability was detected in mathurvishal CloudClassroom-…7.3
• CVE-2026-100316The European VAT Compliance Assistant for WooCommerce plugin…7.2
• CVE-2026-10032The openUrl function in @a2ui/web_core passes an agent-contr…6.1
• CVE-2026-10033The EventON Action User plugin for WordPress is vulnerable t…7.3
• CVE-2026-10034The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable…5.3
• CVE-2026-100347kin-openapi is a Go project for handling OpenAPI files. Prio…5.3
• CVE-2026-100349kin-openapi is a Go project for handling OpenAPI files. Prio…8.2
• CVE-2026-10035The Turnkey bbPress by WeaverTheme plugin for WordPress is v…6.6
• CVE-2026-100350kin-openapi is a Go project for handling OpenAPI files. From…5.3
• CVE-2026-100351kin-openapi is a Go project for handling OpenAPI files. From…7.4
• CVE-2026-100352kin-openapi is a Go project for handling OpenAPI files. Prio…7.5
• CVE-2026-100353kin-openapi is a Go project for handling OpenAPI files. From…7.5