CVE-2026-73502

{
  "id": "CVE-2026-73502",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-18T18:19:33.460",
  "lastModified": "2026-10-22T22:10:00.250",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "kin-openapi is a Go project for handling OpenAPI files. From 0.2.0 until 0.144.0, openapi3filter.ValidateRequest can encounter a NULL-pointer-dereference denial of service when an operation declares a content parameter whose application/json media type has no schema. In openapi3filter/req_resp_decoder.go, the default defaultContentParameterDecoder dereferences mt.Schema.Value without checking whether mt.Schema is nil, even though doc.Validate() accepts the document under OpenAPI 3.0.x and 3.1.x. A single unauthenticated request supplying the parameter value can panic request validation, causing an aborted request with log growth in the common synchronous net/http path or a full process crash in integrations without recovery. This issue is fixed in version 0.144.0."
    },
    {
      "lang": "es",
      "value": "kin-openapi es un proyecto Go para manejar archivos OpenAPI. Desde 0.2.0 hasta 0.144.0, openapi3filter.ValidateRequest puede encontrar una denegación de servicio por desreferencia de puntero NULL cuando una operación declara un parámetro de contenido cuyo tipo de medio application/json no tiene esquema. En openapi3filter/req_resp_decoder.go, el defaultContentParameterDecoder predeterminado desreferencia mt.Schema.Value sin verificar si mt.Schema es nulo, a pesar de que doc.Validate() acepta el documento bajo OpenAPI 3.0.x y 3.1.x. Una única solicitud no autenticada que proporciona el valor del parámetro puede causar un pánico en la validación de la solicitud, provocando una solicitud abortada con crecimiento de registros en la ruta síncrona común de net/HTTP o un fallo completo del proceso en integraciones sin recuperación. Este problema está solucionado en la versión 0.144.0."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "getkin",
          "product": "kin-openapi",
          "versions": [
            {
              "version": ">= 0.2.0, < 0.144.0",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-18T18:42:00.680845Z",
          "id": "CVE-2026-73502",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/getkin/kin-openapi/commit/68ac2affa325514d7d6e731204d6a1edf6bdff64",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/getkin/kin-openapi/releases/tag/v0.144.0",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-jpcw-4wr7-c3vq",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-jpcw-4wr7-c3vq",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}