CVE-2026-76905

About vulnerability

kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS in github.com/getkin/kin-openapi

Affected product:

Grafana , census-ecosystem/opencensus-go-exporter-stackdriver/stackdriver , containerd/containerd , containerd/imgcrypt , containernetworking/plugins , getkin/kin-openapi , google/go-containerregistry , grafana/dataplane/examples , grafana/dataplane/sdata , grafana/e2e , grafana/grafana-app-sdk , grafana/grafana-aws-sdk , grafana/grafana-azure-sdk-go , grafana/grafana-google-sdk-go , grafana/grafana-plugin-sdk-go , grafana/grafana/apps/alerting/notifications , grafana/grafana/apps/investigation , grafana/grafana/apps/playlist , grafana/grafana/pkg/aggregator , grafana/grafana/pkg/promlib , grafana/kindsys , grafana/sqlds , grafana/thema , influxdata/flux , influxdata/influxdb , influxdata/influxdb-client-go , intel/goresctrl , kubernetes/api , kubernetes/apimachinery , kubernetes/apiserver , kubernetes/client-go , kubernetes/code-generator , kubernetes/component-base , kubernetes/kube-openapi , microsoft/hcsshim , oapi-codegen/oapi-codegen , prometheus/prometheus , scottlepp/go-duck , thanos-io/objstore

Affected packages:

github.com/getkin/kin-openapi @ 0.125.0 (+104 more)