Go-openapi vulnerabilities
We track 1 vulnerability in Go-openapi products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Go-openapi vulnerabilities
- 7.5 High severity
swag: Uncontrolled Recursion
go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit. Remote unauthenticated attackers can submit deeply nested JSON documents to services accep