{"id":"ghsa-ghsa-vrcc-3ch7-hppw","seq":2471,"kind":"advisory","title":"kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter","url":"https://github.com/advisories/GHSA-vrcc-3ch7-hppw","permalink":"https://vulnpulse.app/items/ghsa-ghsa-vrcc-3ch7-hppw","summary":"影響: go:github.com/getkin/kin-openapi >= 0.136.0, < 0.149.0 → 0.149.0\nSummary The fix for GHSA-p6wj-qrr4-pgh5 addressed a nil-pointer dereference that occurs when an OpenAPI 3.1 array schema omits the items keyword (which is legal under JSON Schema 2020-12). That fix patched three decoder paths: the standalone parseArray function, the top-level array check in UrlencodedBodyDecoder, and MultipartBodyDecoder. Three additional crash paths were missed. All of them reach the unguarded urlValuesDecoder.parseArray method (openapi3filter/req_resp_decoder.go:576) or the u…","severity":"high","techs":["go","github"],"cves":["CVE-2026-100353"],"tags":["GHSA-vrcc-3ch7-hppw","github.com/getkin/kin-openapi"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-15T20:20:47.000Z","fetched_at":"2026-10-21T16:17:46.637Z"}