{"id":"CVE-2026-76905","title":"kin-openapi is a Go project for handling OpenAPI files","summary":"kin-openapi is a Go project for handling OpenAPI files. From 0.10.0 until 0.141.0, openapi3filter.convertParseError in openapi3filter/validation_error_encoder.go dereferences e.Parameter.In without checking whether e.Parameter is nil. A …","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-476"],"vendor":"Red Hat","product":"Red Hat Edge Manager 1","affected":["migration_toolkit_for_applications 8","multicluster_engine_for_kubernetes","multicluster_global_hub","openshift_serverless","advanced_cluster_management_for_kubernetes 2","ceph_storage 5","ceph_storage 6","ceph_storage 7","ceph_storage 8","ceph_storage 9","edge_manager 1","enterprise_linux 10","enterprise_linux 9","openshift_ai_rhoai","openshift_container_platform 4","openshift_gitops","openstack_platform 18.0","service_interconnect 2"],"patched":["github.com/getkin/kin-openapi 0.141.0"],"published":"2026-08-21","updated":"2026-09-09","sourceUpdated":"2026-09-09T21:06:39.057","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-76905","references":[{"url":"https://github.com/getkin/kin-openapi/commit/1d0a337c9b1570fab283be8a04c8af6e43b9a22c","label":"security-advisories@github.com"},{"url":"https://github.com/getkin/kin-openapi/releases/tag/v0.141.0","label":"security-advisories@github.com"},{"url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-mmfr-pmjx-hw9w","label":"security-advisories@github.com"},{"url":"https://github.com/getkin/kin-openapi/security/advisories/GHSA-mmfr-pmjx-hw9w","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-76905.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-76905"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2521202"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-76905"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76905"},{"url":"https://github.com/advisories/GHSA-mmfr-pmjx-hw9w"}],"tags":["nvd","csaf","vex","red-hat","ghsa","go","score-dispute"],"epss":0.00421,"epssPercentile":0.35933,"aliases":["GHSA-mmfr-pmjx-hw9w"],"ecosystem":"go","scores":{"nvd":7.5,"vendor":5.3,"ghsa":7.5},"ingestedAt":"2026-08-21T21:22:19.585Z","slug":"CVE-2026-76905","body":"## Overview\n\nkin-openapi is a Go project for handling OpenAPI files. From 0.10.0 until 0.141.0, openapi3filter.convertParseError in openapi3filter/validation_error_encoder.go dereferences e.Parameter.In without checking whether e.Parameter is nil. A malformed non-string scalar field in a multipart/form-data request body produces a nested ParseError with a nil RequestError.Parameter, and applications that render the validation error through openapi3filter.ConvertErrors or ValidationErrorEncoder panic. An unauthenticated client can repeatedly send such requests to deny service when the application lacks a recovery boundary. JSON request bodies and applications that do not use these error-rendering helpers are not affected. This issue is fixed in version 0.141.0.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2026-76905)\n\nAffected packages:\n\n- `github.com/getkin/kin-openapi >= 0.10.0, < 0.141.0`\n\nPatched in:\n\n- `github.com/getkin/kin-openapi 0.141.0`\n\nSource: https://github.com/advisories/GHSA-mmfr-pmjx-hw9w\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · affected: Migration Toolkit for Applications 8, Multicluster Global Hub, OpenShift Serverless, Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat Ceph Storage 5, Red Hat Ceph Storage 6, … · no fix planned: Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat Ceph Storage 5, Red Hat Ceph Storage 6, Red Hat Ceph Storage 7, … · updated 2026-09-14 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-76905.json)","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":24938,"id":"CVE-2026-76905","ts":1788989007565,"field":"cvss","old":"5.3","new":"7.5"},{"seq":24937,"id":"CVE-2026-76905","ts":1788989007565,"field":"severity","old":"medium","new":"high"},{"seq":24389,"id":"CVE-2026-76905","ts":1788985267694,"field":"cvss","old":"7.5","new":"5.3"},{"seq":24388,"id":"CVE-2026-76905","ts":1788985267694,"field":"severity","old":"high","new":"medium"},{"seq":23719,"id":"CVE-2026-76905","ts":1788985213530,"field":"cvss","old":"5.3","new":"7.5"},{"seq":23718,"id":"CVE-2026-76905","ts":1788985213530,"field":"severity","old":"medium","new":"high"},{"seq":23017,"id":"CVE-2026-76905","ts":1788981584310,"field":"cvss","old":"7.5","new":"5.3"},{"seq":23016,"id":"CVE-2026-76905","ts":1788981584310,"field":"severity","old":"high","new":"medium"},{"seq":22372,"id":"CVE-2026-76905","ts":1788981342624,"field":"cvss","old":"5.3","new":"7.5"},{"seq":22371,"id":"CVE-2026-76905","ts":1788981342624,"field":"severity","old":"medium","new":"high"},{"seq":21716,"id":"CVE-2026-76905","ts":1788977870590,"field":"cvss","old":"7.5","new":"5.3"},{"seq":21715,"id":"CVE-2026-76905","ts":1788977870590,"field":"severity","old":"high","new":"medium"},{"seq":21090,"id":"CVE-2026-76905","ts":1788977467111,"field":"cvss","old":"5.3","new":"7.5"},{"seq":21089,"id":"CVE-2026-76905","ts":1788977467111,"field":"severity","old":"medium","new":"high"},{"seq":20456,"id":"CVE-2026-76905","ts":1788974155495,"field":"cvss","old":"7.5","new":"5.3"},{"seq":20455,"id":"CVE-2026-76905","ts":1788974155495,"field":"severity","old":"high","new":"medium"},{"seq":19837,"id":"CVE-2026-76905","ts":1788973599422,"field":"cvss","old":"5.3","new":"7.5"},{"seq":19836,"id":"CVE-2026-76905","ts":1788973599422,"field":"severity","old":"medium","new":"high"},{"seq":19095,"id":"CVE-2026-76905","ts":1788969858228,"field":"cvss","old":"7.5","new":"5.3"},{"seq":19094,"id":"CVE-2026-76905","ts":1788969858228,"field":"severity","old":"high","new":"medium"},{"seq":18518,"id":"CVE-2026-76905","ts":1788969754563,"field":"cvss","old":"5.3","new":"7.5"},{"seq":18517,"id":"CVE-2026-76905","ts":1788969754563,"field":"severity","old":"medium","new":"high"},{"seq":17915,"id":"CVE-2026-76905","ts":1788966240500,"field":"cvss","old":"7.5","new":"5.3"},{"seq":17914,"id":"CVE-2026-76905","ts":1788966240500,"field":"severity","old":"high","new":"medium"},{"seq":17375,"id":"CVE-2026-76905","ts":1788965883701,"field":"cvss","old":"5.3","new":"7.5"},{"seq":17374,"id":"CVE-2026-76905","ts":1788965883701,"field":"severity","old":"medium","new":"high"},{"seq":16829,"id":"CVE-2026-76905","ts":1788962624593,"field":"cvss","old":"7.5","new":"5.3"},{"seq":16828,"id":"CVE-2026-76905","ts":1788962624593,"field":"severity","old":"high","new":"medium"},{"seq":16364,"id":"CVE-2026-76905","ts":1788962045977,"field":"cvss","old":"5.3","new":"7.5"},{"seq":16363,"id":"CVE-2026-76905","ts":1788962045977,"field":"severity","old":"medium","new":"high"},{"seq":15840,"id":"CVE-2026-76905","ts":1788959000727,"field":"cvss","old":"7.5","new":"5.3"},{"seq":15839,"id":"CVE-2026-76905","ts":1788959000727,"field":"severity","old":"high","new":"medium"},{"seq":15430,"id":"CVE-2026-76905","ts":1788958188539,"field":"cvss","old":"5.3","new":"7.5"},{"seq":15429,"id":"CVE-2026-76905","ts":1788958188539,"field":"severity","old":"medium","new":"high"},{"seq":15020,"id":"CVE-2026-76905","ts":1788955369210,"field":"cvss","old":"7.5","new":"5.3"},{"seq":15019,"id":"CVE-2026-76905","ts":1788955369210,"field":"severity","old":"high","new":"medium"},{"seq":14610,"id":"CVE-2026-76905","ts":1788954335555,"field":"cvss","old":"5.3","new":"7.5"},{"seq":14609,"id":"CVE-2026-76905","ts":1788954335555,"field":"severity","old":"medium","new":"high"},{"seq":14200,"id":"CVE-2026-76905","ts":1788951744439,"field":"cvss","old":"7.5","new":"5.3"},{"seq":14199,"id":"CVE-2026-76905","ts":1788951744439,"field":"severity","old":"high","new":"medium"},{"seq":13790,"id":"CVE-2026-76905","ts":1788950488096,"field":"cvss","old":"5.3","new":"7.5"},{"seq":13789,"id":"CVE-2026-76905","ts":1788950488096,"field":"severity","old":"medium","new":"high"},{"seq":13380,"id":"CVE-2026-76905","ts":1788948112391,"field":"cvss","old":"7.5","new":"5.3"},{"seq":13379,"id":"CVE-2026-76905","ts":1788948112391,"field":"severity","old":"high","new":"medium"},{"seq":12970,"id":"CVE-2026-76905","ts":1788946630577,"field":"cvss","old":"5.3","new":"7.5"},{"seq":12969,"id":"CVE-2026-76905","ts":1788946630577,"field":"severity","old":"medium","new":"high"},{"seq":12560,"id":"CVE-2026-76905","ts":1788944478742,"field":"cvss","old":"7.5","new":"5.3"},{"seq":12559,"id":"CVE-2026-76905","ts":1788944478742,"field":"severity","old":"high","new":"medium"},{"seq":12150,"id":"CVE-2026-76905","ts":1788942777180,"field":"cvss","old":"5.3","new":"7.5"},{"seq":12149,"id":"CVE-2026-76905","ts":1788942777180,"field":"severity","old":"medium","new":"high"}]}