VULNRABLE / Vulnerability / GHSA-r277-6w6q-xmqw
GHSA-r277-6w6q-xmqw
CRITICAL WATCH github.com/getkin/kin-openapi GHSA
Exploit verdict: CVSS 9.5 · no EPSS data
CVSS Score
9.5
Severity
CRITICAL
EPSS
—
Source
GHSA
Summary
kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default
What this means
GHSA-r277-6w6q-xmqw is a critical-severity vulnerability affecting github.com/getkin/kin-openapi, rated CVSS 9.5. Published July 24, 2026.
View full advisory at GHSA →