Product
high
threat
Uncontrolled Recursion DoS in kin-openapi
4 TTPsThe kin-openapi library lacks cycle detection during runtime schema validation, allowing attackers to trigger an unrecoverable Go runtime stack overflow that terminates the entire host process.
exploited
kin-openapi +4
denial-of-service
vulnerability
openapi
go
authentication-bypass
path-confusion
web-application-vulnerability
4t
medium
advisory
Uncontrolled Resource Consumption in kin-openapi deepObject Decoder
1 TTPAn unauthenticated remote attacker can cause a denial-of-service via memory exhaustion by supplying a large integer index in a 'deepObject' style query parameter.
kin-openapi +1
denial-of-service
memory-exhaustion
vulnerability
golang
1t