CVE-2026-100353 | getkin kin-openapi up to 0.148.x openapi3filter decoder urlValuesDecoder.parseArray array/deepObject null pointer dereference

October 15, 2026 Yanac

A vulnerability has been found in getkin kin-openapi up to 0.148.x and classified as problematic. Affected by this vulnerability is the function urlValuesDecoder.parseArray of the component openapi3filter decoder. Performing a manipulation of the argument array/deepObject results in null pointer dereference.

This vulnerability is reported as CVE-2026-100353. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More