VDB
CVE-2026-100347
CVE-2026-100347
PUBLISHED
CVSS 5.300000190734863 MEDIUM
kin-openapi: Unauthenticated panic (DoS) in openapi3filter legacy router via non-canonical/unsupported HTTP method on a static path
EPSS 0.52% · 43.8th percentile
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.52%
43.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | crossplane-provider-aws-licensemanager-fips | 0 |
| chainguard | crossplane-provider-aws-servicediscovery | 0 |
| chainguard | crossplane-provider-aws-appconfig-fips | 0 |
| chainguard | crossplane-provider-aws-kinesisanalytics | 0 |
| chainguard | crossplane-provider-aws-route53recoveryreadiness-fips | 0 |
| chainguard | crossplane-provider-aws-osis-fips | 0 |
| chainguard | crossplane-cli-2.4 | 0 |
| chainguard | crossplane-provider-azure-securityinsights | 0 |
| chainguard | crossplane-provider-aws-imagebuilder-fips | 0 |
| wolfi | terraform-provider-grafana | 0 |
| chainguard | grafana-13.0 | 0 |
| chainguard | crossplane-provider-aws-mediapackage-fips | 0 |
| getkin | kin-openapi | 0 |
| chainguard | crossplane-provider-aws-autoscaling | 0 |
| chainguard | crossplane-provider-aws-dsql-fips | 0 |
| chainguard | crossplane-provider-aws-inspector2-fips | 0 |
| chainguard | drone-fips | 0 |
| chainguard | crossplane-provider-aws-globalaccelerator-fips | 0 |
| chainguard | crossplane-provider-aws-wafregional-fips | 0 |
| chainguard | crossplane-provider-aws-dlm-fips | 0 |
…and 419 more
Timeline
- Oct 15, 2026 CVE Published
- Oct 15, 2026 Coalition ESS Score
- Oct 15, 2026 CVE Updated
- Oct 16, 2026 EPSS Score
- Oct 20, 2026 EPSS Score
- Oct 21, 2026 EPSS Score
- Oct 24, 2026 EPSS Score
- Oct 25, 2026 EPSS Score
- Oct 29, 2026 EPSS Score
- Oct 30, 2026 Security Advisory
References
- https://nvd.nist.gov/vuln/detail/CVE-2026-100347 advisory
- https://github.com/advisories/GHSA-fh4f-47mf-f2gj advisory
- https://github.com/getkin/kin-openapi/security/advisories/GHSA-fh4f-47mf-f2gj url
- https://github.com/getkin/kin-openapi/commit/f1a5b523b82868d2d9be2e116b4e942892be72c3 patch
- https://github.com/getkin/kin-openapi/releases/tag/v0.145.0 url