OpenAPI.NET vulnerabilities

2 known vulnerabilities in OpenAPI.NET from Microsoft. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  OpenAPI.NET: Uncontrolled Resource Consumption

  CVE-2026-72923Sep 8, 2026MicrosoftEPSS 1.85%

  The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the model. In Microsoft.OpenApi.Readers versions before 1.6.30 and Microsoft.OpenApi.YamlReader f

• 7.5 High severity

  OpenAPI.NET: Uncontrolled Recursion

  CVE-2026-49451Jun 30, 2026Microsoft

  The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the model. From 2.0.0-preview11 until 2.7.5 and 3.5.4, a small OpenAPI document containing a circ