THREAT OPS › Threat News › [GHSA] GHSA-mmfr-pmjx-hw9w (high) — kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS
[GHSA] GHSA-mmfr-pmjx-hw9w (high) — kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS
GHSA-mmfr-pmjx-hw9w Severity: high CVE: CVE-2026-76905
kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoS
### Summary
A nil-pointer dereference in `openapi3filter.ConvertErrors` lets any unauthenticated client crash a server with a single HTTP request. When an application validates a `multipart/form-data` request body
MITRE ATT&CK techniques
- CredentialsT1589.001
Indicators of compromise
- 98d956447b64eaa10d3570a80b3be1a2849945f1sha1
- CVE-2026-76905cve
Original source: https://github.com/advisories/GHSA-mmfr-pmjx-hw9w