kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-73501 · Microsoft / collected KEV context

GHSA-r277-6w6q-xmqw

GO-2026-6095

cve-program · CVE-2026-73501

• https://github.com/getkin/kin-openapi/security/advisories/GHSA-r277-6w6q-xmqw
• https://github.com/getkin/kin-openapi/commit/f0407d53b0730280266f454b755010e7eeb985da
• https://github.com/getkin/kin-openapi/releases/tag/v0.144.0

nvd · CVE-2026-73501

• https://github.com/getkin/kin-openapi/commit/f0407d53b0730280266f454b755010e7eeb985da
• https://github.com/getkin/kin-openapi/releases/tag/v0.144.0
• https://github.com/getkin/kin-openapi/security/advisories/GHSA-r277-6w6q-xmqw

osv · GHSA-r277-6w6q-xmqw

• https://github.com/getkin/kin-openapi/security/advisories/GHSA-r277-6w6q-xmqw
• https://github.com/getkin/kin-openapi/commit/f0407d53b0730280266f454b755010e7eeb985da
• https://github.com/getkin/kin-openapi
• https://github.com/getkin/kin-openapi/releases/tag/v0.144.0

osv · GO-2026-6095

• https://github.com/getkin/kin-openapi/security/advisories/GHSA-r277-6w6q-xmqw
• https://github.com/getkin/kin-openapi/commit/f0407d53b0730280266f454b755010e7eeb985da
• https://github.com/getkin/kin-openapi/releases/tag/v0.144.0

No related operational record is retained in the current change model.