CVE-2026-49451

{
  "id": "CVE-2026-49451",
  "sourceIdentifier": "[email protected]",
  "published": "2026-06-30T17:16:22.390",
  "lastModified": "2026-10-25T21:10:00.770",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the model. From 2.0.0-preview11 until 2.7.5 and 3.5.4, a small OpenAPI document containing a circular schema reference can cause process termination through stack overflow in Microsoft.OpenApi. The issue affects OpenAPI document parsing through public OpenAPI.NET reader APIs and has been confirmed across both JSON and YAML reader paths. This vulnerability is fixed in 2.7.5 and 3.5.4."
    },
    {
      "lang": "es",
      "value": "El SDK de OpenAPI.NET contiene un modelo de objetos útil para documentos OpenAPI en .NET, junto con serializadores comunes para extraer documentos OpenAPI JSON y YAML sin procesar del modelo. Desde 2.0.0-preview11 hasta 2.7.5 y 3.5.4, un pequeño documento OpenAPI que contiene una referencia de esquema circular puede causar la terminación del proceso a través de desbordamiento de pila en Microsoft.OpenApi. El problema afecta el análisis de documentos OpenAPI a través de las API de lector públicas de OpenAPI.NET y se ha confirmado en las rutas de lector JSON y YAML. Esta vulnerabilidad está corregida en 2.7.5 y 3.5.4."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "microsoft",
          "product": "OpenAPI.NET",
          "versions": [
            {
              "version": ">= 2.0.0-preview11, < 2.7.5",
              "status": "affected"
            },
            {
              "version": ">= 3.0.0, < 3.5.4",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-30T18:57:15.842264Z",
          "id": "CVE-2026-49451",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-674"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/microsoft/OpenAPI.NET/security/advisories/GHSA-v5pm-xwqc-g5wc",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/microsoft/OpenAPI.NET/security/advisories/GHSA-v5pm-xwqc-g5wc",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}