CVE-2026-73502 | getkin kin-openapi up to 0.143.x defaultContentParameterDecoder req_resp_decoder.go openapi3filter.ValidateRequest null pointer dereference

August 18, 2026 Yanac

A vulnerability, which was classified as problematic, was found in getkin kin-openapi up to 0.143.x. Affected by this issue is the function openapi3filter.ValidateRequest of the file openapi3filter/req_resp_decoder.go of the component defaultContentParameterDecoder. Executing a manipulation can lead to null pointer dereference.

This vulnerability is handled as CVE-2026-73502. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More