一、漏洞信息
漏洞编号：CVE-2026-76905
漏洞归属组件：kin-openapi
漏洞归属分支：默认分支
漏洞归属的版本：v0.127.0
漏洞修复版本: 0.141.0
CVSS分值：
BaseScore： 7.5 High
Vector： CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
漏洞简述：
kin-openapi is a Go project for handling OpenAPI files. From 0.10.0 until 0.141.0, openapi3filter.convertParseError in openapi3filter/validation_error_encoder.go dereferences e.Parameter.In without checking whether e.Parameter is nil. A malformed non-string scalar field in a multipart/form-data request body produces a nested ParseError with a nil RequestError.Parameter, and applications that render the validation error through openapi3filter.ConvertErrors or ValidationErrorEncoder panic. An unauthenticated client can repeatedly send such requests to deny service when the application lacks a recovery boundary. JSON request bodies and applications that do not use these error-rendering helpers are not affected. This issue is fixed in version 0.141.0.
漏洞公开时间：2026-08-21 21:17:06
漏洞创建时间：2026-08-23 03:06:38
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2026-76905
一、漏洞信息
漏洞编号：CVE-2026-76905
漏洞归属组件：kin-openapi
漏洞归属分支：默认分支
漏洞归属的版本：v0.127.0
漏洞修复版本: 0.141.0
CVSS分值：
BaseScore： 7.5 High
Vector： CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
漏洞简述：
kin-openapi is a Go project for handling OpenAPI files. From 0.10.0 until 0.141.0, openapi3filter.convertParseError in openapi3filter/validation_error_encoder.go dereferences e.Parameter.In without checking whether e.Parameter is nil. A malformed non-string scalar field in a multipart/form-data request body produces a nested ParseError with a nil RequestError.Parameter, and applications that render the validation error through openapi3filter.ConvertErrors or ValidationErrorEncoder panic. An unauthenticated client can repeatedly send such requests to deny service when the application lacks a recovery boundary. JSON request bodies and applications that do not use these error-rendering helpers are not affected. This issue is fixed in version 0.141.0.
漏洞公开时间：2026-08-21 21:17:06
漏洞创建时间：2026-08-23 03:06:38
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2026-76905