VULNRABLE / Vulnerability / CVE-2026-100354
CVE-2026-100354
HIGH LOW github.com/getkin/kin-openapi GHSA
Exploit verdict: No active-exploit signal
CVSS Score
8
Severity
HIGH
EPSS
0%
Source
GHSA
Summary
kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash
What this means
CVE-2026-100354 is a high-severity vulnerability affecting github.com/getkin/kin-openapi, rated CVSS 8. The EPSS model estimates a 0% probability of exploitation in the next 30 days. Published October 15, 2026.
View full advisory at GHSA →