Threats Tagged 'ghsa-jpcw-4wr7-c3vq'

A null-pointer dereference vulnerability exists in kin-openapi's openapi3filter.ValidateRequest function, allowing unauthenticated clients to cause a denial of service by sending a single HTTP request. The issue occurs when validating a request against a content parameter whose media type object lacks a schema, which is legal under the OpenAPI specification. This leads to a panic and potential process crash in versions up to 0.143.0. The vulnerability affects both OpenAPI 3.0.x and 3.1.x and is patched in version 0.144.0.