{"id":"EUVD-2026-102143","enisaUuid":"d20c947a-1cf2-3c99-8523-7e446bc1acd3","description":"kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.143.0, openapi3filter accepts OpenAPI 3.1 array schemas without an items keyword and then dereferences the nil Schema.Items value while decoding application/x-www-form-urlencoded or multipart/form-data request bodies, response headers, and other array parameter surfaces. A remote unauthenticated client can reach an affected operation with a nonempty request or matching response and deterministically trigger a nil-pointer panic during ValidateRequest or ValidateResponse. OpenAPI 3.0 documents are not affected because document validation rejects arrays without items, and JSON request bodies use a different decoder path. This issue is fixed in version 0.143.0.","datePublished":"Oct 15, 2026, 3:29:05 PM","dateUpdated":"Oct 20, 2026, 2:45:09 AM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-p6wj-qrr4-pgh5\nhttps://github.com/getkin/kin-openapi/commit/30e292371a89ca6d1f91a9553e0aa518b49f838d\nhttps://github.com/getkin/kin-openapi/releases/tag/v0.143.0\n","aliases":"CVE-2026-97394\nGHSA-p6wj-qrr4-pgh5\n","assigner":"GitHub_M","epss":0.62,"enisaIdProduct":[{"id":"10a95de9-b40f-3e09-9ea9-aeb7b4c5e9fc","product":{"name":"kin-openapi","vendor":{"name":"getkin"}},"product_version":"0.136.0, \u003c 0.143.0"}],"enisaIdVendor":[{"id":"c31b0515-87e0-3d63-bd7f-33f24fbbeac1","vendor":{"name":"getkin"}}],"enisaIdVulnerability":[{"id":"5c626608-2052-304c-8c43-20b0419d5279","vulnerability":{"id":"CVE-2026-97394","description":"kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.143.0, openapi3filter accepts OpenAPI 3.1 array schemas without an items keyword and then dereferences the nil Schema.Items value while decoding application/x-www-form-urlencoded or multipart/form-data request bodies, response headers, and other array parameter surfaces. A remote unauthenticated client can reach an affected operation with a nonempty request or matching response and deterministically trigger a nil-pointer panic during ValidateRequest or ValidateResponse. OpenAPI 3.0 documents are not affected because document validation rejects arrays without items, and JSON request bodies use a different decoder path. This issue is fixed in version 0.143.0.","datePublished":"Oct 15, 2026, 3:29:05 PM","dateUpdated":"Oct 20, 2026, 2:45:09 AM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-p6wj-qrr4-pgh5\nhttps://github.com/getkin/kin-openapi/commit/30e292371a89ca6d1f91a9553e0aa518b49f838d\nhttps://github.com/getkin/kin-openapi/releases/tag/v0.143.0\n","enisa_id":"EUVD-2026-102143\n","assigner":"GitHub_M","epss":0.62,"dataProcessed":"Nov 7, 2026, 7:17:16 AM","vulnerabilityProduct":[{"id":"3992b3e4-035b-343f-9de9-6604dc85d2c4","product":{"name":"kin-openapi","vendor":{"name":"getkin"}},"product_version":"0.136.0, \u003c 0.143.0"}],"vulnerabilityVendor":[{"id":"7c8b3217-1c61-3eec-a0b5-d38e25d61e59","vendor":{"name":"getkin"}}]}},{"id":"cee44785-2fcb-3864-833d-849e23d65ae8","vulnerability":{"id":"GHSA-p6wj-qrr4-pgh5","description":"kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 array schemas missing items","datePublished":"Oct 15, 2026, 8:14:54 PM","dateUpdated":"Oct 15, 2026, 8:14:54 PM","baseScore":0.0,"references":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-p6wj-qrr4-pgh5\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-97394\nhttps://github.com/getkin/kin-openapi/commit/30e292371a89ca6d1f91a9553e0aa518b49f838d\nhttps://github.com/getkin/kin-openapi\nhttps://github.com/getkin/kin-openapi/releases/tag/v0.143.0\n","enisa_id":"EUVD-2026-102143\n","aliases":"CVE-2026-97394\nGHSA-p6wj-qrr4-pgh5\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:07:48 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"11bdb6c1-003a-33cf-8166-75fec6d27ea2","advisory":{"id":"RHSA-2026:76448","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Oct 5, 2026, 10:26:33 PM","dateUpdated":"Nov 4, 2026, 3:58:45 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:76448\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76448.json\n","aliases":"CVE-2024-24786\nCVE-2026-13719\nCVE-2026-13720\nCVE-2026-56851\nCVE-2026-61801\nCVE-2026-81841\nCVE-2026-97394\nCVE-2026-101899\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"702be080-9610-3837-97f3-788805b20e64","product":{"name":"grafana13.1-0:13.1.7-0.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"b51fd88c-244e-3b5a-a852-0f7ad787e57b","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"efa9c4ee-c8ea-3311-83b3-108bd785e5ff","product":{"name":"grafana13.1-0:13.1.7-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"fc44ab96-7029-3d3b-9b8d-b2c35eb26969","product":{"name":"grafana13.1-0:13.1.7-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"44e0b8ed-06bc-39fd-84e5-c16eef8d30e9","advisory":{"id":"RHSA-2026:76430","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Oct 5, 2026, 10:17:42 PM","dateUpdated":"Nov 4, 2026, 3:58:44 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:76430\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76430.json\n","aliases":"CVE-2024-24786\nCVE-2026-13719\nCVE-2026-13720\nCVE-2026-56851\nCVE-2026-61801\nCVE-2026-76154\nCVE-2026-81841\nCVE-2026-97394\nCVE-2026-101899\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"3e27b96b-374c-3924-82dd-40e59dc102ee","product":{"name":"grafana13.2-0:13.2.3-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"495ab95f-06df-375a-9483-ccd5377fddb4","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"b8095ef2-6375-3dc5-8f97-dd9b59059057","product":{"name":"grafana13.2-0:13.2.3-0.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"dfd7aab1-c131-3807-8753-13a6469be92d","product":{"name":"grafana13.2-0:13.2.3-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}},{"id":"8d3dc55b-f719-3568-aea2-13ff9ce01c69","advisory":{"id":"RHSA-2026:76677","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Oct 6, 2026, 8:26:00 AM","dateUpdated":"Nov 4, 2026, 3:54:16 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:76677\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76677.json\n","aliases":"CVE-2024-24786\nCVE-2026-56851\nCVE-2026-61801\nCVE-2026-95502\nCVE-2026-97394\nCVE-2026-100347\nCVE-2026-100348\nCVE-2026-100349\nCVE-2026-100350\nCVE-2026-100351\nCVE-2026-101899\nCVE-2026-109855\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"335287a7-ced4-3080-b1ad-2e6235bafb6e","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"51b55ba2-f5d3-34ff-b412-1563b7f7b0b4","product":{"name":"grafana12.4-0:12.4.12-0.4.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"63f37ffb-218f-312e-b209-a77eda41aef4","product":{"name":"grafana12.4-0:12.4.12-0.4.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"f76f70aa-ccdd-3070-90c3-fd71da797c14","product":{"name":"grafana12.4-0:12.4.12-0.4.hum1@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"b8e6f540-7e1a-3159-96f0-e30a3dae4948","advisory":{"id":"RHSA-2026:82637","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Oct 14, 2026, 12:21:37 AM","dateUpdated":"Nov 6, 2026, 10:21:06 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:82637\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82637.json\n","aliases":"CVE-2026-97394\nCVE-2026-100347\nCVE-2026-100348\nCVE-2026-100349\nCVE-2026-100350\nCVE-2026-100351\nCVE-2026-100352\nCVE-2026-100353\nCVE-2026-100354\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"0888f3f1-d9b2-3166-9a1d-213d511f4a98","product":{"name":"hugo-0:0.168.0-0.1.hum1@s390x","vendor":{"name":"Red Hat"}}},{"id":"0d3926a5-07b1-3d2c-bac9-36ef90660fb4","product":{"name":"hugo-0:0.168.0-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"11faf46b-7717-359a-b011-0aaebeda5b13","product":{"name":"hugo-0:0.168.0-0.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"d30ac518-ac4e-39bb-bb9d-1c155212f02f","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"f21cf517-05c4-3027-9787-c55b17e27cda","product":{"name":"hugo-0:0.168.0-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}}]}