[Git][security-tracker-team/security-tracker][master] Add CVE-2026-73501/golang-github-getkin-kin-openapi

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8b45ba24 by Salvatore Bonaccorso at 2026-08-13T09:30:09+02:00
Add CVE-2026-73501/golang-github-getkin-kin-openapi

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3,7 +3,9 @@ CVE-2026-7366 (IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower
 CVE-2026-73519 (WolfStack before 25.9.2 contains a hard-coded cluster-authentication s ...)
 	TODO: check
 CVE-2026-73501 (kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144 ...)
-	TODO: check
+	- golang-github-getkin-kin-openapi <unfixed>
+	NOTE: https://github.com/getkin/kin-openapi/security/advisories/GHSA-r277-6w6q-xmqw
+	NOTE: Fixed by: https://github.com/getkin/kin-openapi/commit/f0407d53b0730280266f454b755010e7eeb985da (v0.144.0)
 CVE-2026-73500 (etcd is a distributed key-value store for the data of a distributed sy ...)
 	TODO: check
 CVE-2026-73499 (etcd is a distributed key-value store for the data of a distributed sy ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8b45ba240a9c0d26363e6576b0c8747d2260eb5a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8b45ba240a9c0d26363e6576b0c8747d2260eb5a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260813/ea00d6de/attachment-0001.htm>