{"id":"ghsa-ghsa-74vm-87hj-r66f","seq":2450,"kind":"advisory","title":"kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content","url":"https://github.com/advisories/GHSA-74vm-87hj-r66f","permalink":"https://vulnpulse.app/items/ghsa-ghsa-74vm-87hj-r66f","summary":"影響: go:github.com/getkin/kin-openapi <= 0.145.0 → 0.146.0\nSummary ValidateResponse panics on a nil pointer when a spec declares a response header with content instead of schema. doc.Validate() accepts that document, so the crash comes from a spec the library just called valid. Same class as GHSA-jpcw-4wr7-c3vq, which covered the request-parameter case in v0.144.0; this is the response-header path. Affects github.com/getkin/kin-openapi 0 { Two things I checked rather than assumed. The response does not need to carry the header; declaring it is enough,…","severity":"high","techs":["go","github"],"cves":["CVE-2026-100349"],"tags":["GHSA-74vm-87hj-r66f","github.com/getkin/kin-openapi"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-16T19:58:46.000Z","fetched_at":"2026-10-21T16:17:46.637Z"}