CVE-2026-100354
HighAdvisory
Published 15 Oct 2026In the index since 16 Oct 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 168
- of 18,137 indexed, latest versions
- Container images
- 134
- deployed by those charts
- Fix available
- 1 of 1
- affected package
kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Causes Fatal Process Crash
Carried by container images the latest versions of 168 of 18,137 indexed charts deploy, on 134 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.33.0, v0.53.0, v0.61.0, v0.66.0+30 more | 0.149.0 | 134 |
- OSV records
- GHSA-g8cf-rcjf-c8cf
Charts affected
168 by stars
Container images carrying it
134 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| grafana/ | 7cb8c64c4d57 | github.com/ | 0.149.0 | 1 |
| grafana/ | 8640e5038e83 | github.com/ | 0.149.0 | 1 |
| grafana/ | 8b37a2f028f1 | github.com/ | 0.149.0 | 1 |
| grafana/ | 9746858c20e6 | github.com/ | 0.149.0 | 1 |
| grafana/ | a1701c218024 | github.com/ | 0.149.0 | 1 |
| grafana/ | a738d0744784 | github.com/ | 0.149.0 | 1 |
| grafana/ | a9043254ba16 | github.com/ | 0.149.0 | 1 |
| grafana/ | ab5cb380e3ff | github.com/ | 0.149.0 | 1 |
| grafana/ | b23b588cf7cb | github.com/ | 0.149.0 | 1 |
| grafana/ | b5b59bfc7561 | github.com/ | 0.149.0 | 1 |
| grafana/ | ba93c9d192e5 | github.com/ | 0.149.0 | 1 |
| grafana/ | e5a9655dabef | github.com/ | 0.149.0 | 1 |
| grafana/ | ecc1b80b8ca2 | github.com/ | 0.149.0 | 1 |
| grafana/ | f9811e4e687f | github.com/ | 0.149.0 | 1 |
| grafana/ | fa801ab6e1ae | github.com/ | 0.149.0 | 1 |
| grafana/ | 09d8c3ce4f3a | github.com/ | 0.149.0 | 1 |
| haproxytech/ | 14e4afa90dfd | github.com/ | 0.149.0 | 1 |
| haproxytech/ | 1fe3f201ebb5 | github.com/ | 0.149.0 | 1 |
| haproxytech/ | 7f3dc8c7e031 | github.com/ | 0.149.0 | 1 |
| haproxytech/ | 8951be4b4e1c | github.com/ | 0.149.0 | 1 |
| hfoxy4/ | 0bfb65aaad93 | github.com/ | 0.149.0 | 1 |
| hfoxy4/ | 0761fe08f14c | github.com/ | 0.149.0 | 1 |
| hiversh/ | 0e36d98402bc | github.com/ | 0.149.0 | 1 |
| hiversh/ | b5048c6342ce | github.com/ | 0.149.0 | 1 |
| hiversh/ | 2fbf9f264498 | github.com/ | 0.149.0 | 1 |
| hiversh/ | 4f43130f51e5 | github.com/ | 0.149.0 | 1 |
| hiversh/ | b0b85f8942c7 | github.com/ | 0.149.0 | 1 |
| hiversh/ | 50c07b84f298 | github.com/ | 0.149.0 | 1 |
| hiversh/ | 836a37641941 | github.com/ | 0.149.0 | 1 |
| hiversh/ | 958b7ebb4eb4 | github.com/ | 0.149.0 | 1 |
| hiversh/ | 63a5ae179a9f | github.com/ | 0.149.0 | 1 |
| intel/ | 3426deb77337 | github.com/ | 0.149.0 | 1 |
| jkaninda/ | 8cfda26ecb7d | github.com/ | 0.149.0 | 1 |
| junktext/ | a70936c04aed | github.com/ | 0.149.0 | 1 |
| kubeshop/ | 8b5bfd57a3ce | github.com/ | 0.149.0 | 1 |
| kubeshop/ | 126c713cf7d8 | github.com/ | 0.149.0 | 1 |
| kvalitetsit/ | f57e7553f5bd | github.com/ | 0.149.0 | 1 |
| l7mp/ | 0ea40a1d42d5 | github.com/ | 0.149.0 | 1 |
| l7mp/ | c34f7c931491 | github.com/ | 0.149.0 | 1 |
| l7mp/ | 4383766e66c5 | github.com/ | 0.149.0 | 1 |
| mongodb/ | cfe202a2a076 | github.com/ | 0.149.0 | 1 |
| muonsoft/ | c9afe1295484 | github.com/ | 0.149.0 | 1 |
| novosga/ | 9957d44343db | github.com/ | 0.149.0 | 1 |
| oamdev/ | 95fa412c934e | github.com/ | 0.149.0 | 1 |
| percona/ | 003f9c25f842 | github.com/ | 0.149.0 | 1 |
| projectdiscovery/ | d76713284ad0 | github.com/ | 0.149.0 | 1 |
| scholtz2/ | f12ce1cfb72e | github.com/ | 0.149.0 | 1 |
| scholtz2/ | 5aaa5d4ab8b8 | github.com/ | 0.149.0 | 1 |
| scholtz2/ | 64966de56d9f | github.com/ | 0.149.0 | 1 |
| scholtz2/ | e9af7d8ff6bb | github.com/ | 0.149.0 | 1 |