AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-21T21:17:07.130Z and has not been modified since then. CVE-2026-77354 is a vulnerability in the kin-openapi Go project for handling OpenAPI files. From version 0.124.0 to 0.142.0, an unauthenticated client can send a specially crafted query parameter to an endpoint with a deepObject schema containin [truncated]
A vulnerability in the kin-openapi Go project for handling OpenAPI files allows for a denial-of-service (DoS) attack. The issue arises from the openapi3filter.convertParseError function in openapi3filter/validation_error_encoder.go, which dereferences e.Parameter.In without checking if e.Parameter is nil. This can lead to a panic in applications that render validation errors through openapi3filter.Convert [truncated]
