CVE-2026-73501
CriticalAdvisory
Published 24 Jul 2026In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.1
- base score, highest
- EPSS
- 0.003
- 28th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 122
- of 17,781 indexed, latest versions
- Container images
- 113
- deployed by those charts
- Fix available
- 1 of 1
- affected package
kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default
Carried by container images the latest versions of 122 of 17,781 indexed charts deploy, on 113 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.33.0, v0.53.0, v0.61.0, v0.66.0+27 more | 0.144.0 | 113 |
- OSV records
- GHSA-r277-6w6q-xmqw
- Also known as
- GO-2026-6095
Charts affected
122 by stars
Container images carrying it
113 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| grafana/ | a738d0744784 | github.com/ | 0.144.0 | 1 |
| grafana/ | a9043254ba16 | github.com/ | 0.144.0 | 1 |
| grafana/ | b23b588cf7cb | github.com/ | 0.144.0 | 1 |
| grafana/ | b5b59bfc7561 | github.com/ | 0.144.0 | 1 |
| grafana/ | ba93c9d192e5 | github.com/ | 0.144.0 | 1 |
| grafana/ | ecc1b80b8ca2 | github.com/ | 0.144.0 | 1 |
| grafana/ | f9811e4e687f | github.com/ | 0.144.0 | 1 |
| grafana/ | fa801ab6e1ae | github.com/ | 0.144.0 | 1 |
| grafana/ | 09d8c3ce4f3a | github.com/ | 0.144.0 | 1 |
| haproxytech/ | 14e4afa90dfd | github.com/ | 0.144.0 | 1 |
| haproxytech/ | 7f3dc8c7e031 | github.com/ | 0.144.0 | 1 |
| haproxytech/ | 8951be4b4e1c | github.com/ | 0.144.0 | 1 |
| hiversh/ | 0e36d98402bc | github.com/ | 0.144.0 | 1 |
| hiversh/ | b5048c6342ce | github.com/ | 0.144.0 | 1 |
| hiversh/ | 2fbf9f264498 | github.com/ | 0.144.0 | 1 |
| hiversh/ | 4f43130f51e5 | github.com/ | 0.144.0 | 1 |
| hiversh/ | b0b85f8942c7 | github.com/ | 0.144.0 | 1 |
| hiversh/ | 50c07b84f298 | github.com/ | 0.144.0 | 1 |
| hiversh/ | 836a37641941 | github.com/ | 0.144.0 | 1 |
| hiversh/ | 958b7ebb4eb4 | github.com/ | 0.144.0 | 1 |
| hiversh/ | 63a5ae179a9f | github.com/ | 0.144.0 | 1 |
| intel/ | 3426deb77337 | github.com/ | 0.144.0 | 1 |
| junktext/ | a70936c04aed | github.com/ | 0.144.0 | 1 |
| kubeshop/ | 8b5bfd57a3ce | github.com/ | 0.144.0 | 1 |
| kubeshop/ | 126c713cf7d8 | github.com/ | 0.144.0 | 1 |
| kvalitetsit/ | f57e7553f5bd | github.com/ | 0.144.0 | 1 |
| l7mp/ | 0ea40a1d42d5 | github.com/ | 0.144.0 | 1 |
| l7mp/ | c34f7c931491 | github.com/ | 0.144.0 | 1 |
| l7mp/ | 4383766e66c5 | github.com/ | 0.144.0 | 1 |
| muonsoft/ | c9afe1295484 | github.com/ | 0.144.0 | 1 |
| novosga/ | 34b9acbe6e51 | github.com/ | 0.144.0 | 1 |
| percona/ | 003f9c25f842 | github.com/ | 0.144.0 | 1 |
| scholtz2/ | f12ce1cfb72e | github.com/ | 0.144.0 | 1 |
| scholtz2/ | 5aaa5d4ab8b8 | github.com/ | 0.144.0 | 1 |
| scholtz2/ | 64966de56d9f | github.com/ | 0.144.0 | 1 |
| scholtz2/ | e9af7d8ff6bb | github.com/ | 0.144.0 | 1 |
| scholtz2/ | 1ec63eca86b6 | github.com/ | 0.144.0 | 1 |
| scholtz2/ | 70263d8fab5b | github.com/ | 0.144.0 | 1 |
| scholtz2/ | 3a3b3d3277d2 | github.com/ | 0.144.0 | 1 |
| scholtz2/ | 6770214bc881 | github.com/ | 0.144.0 | 1 |
| sealio/ | a326a2f03660 | github.com/ | 0.144.0 | 1 |
| sky5367/ | d51bf68d4b26 | github.com/ | 0.144.0 | 1 |
| skylenet/ | 8698903e379f | github.com/ | 0.144.0 | 1 |
| svtechnmaa/ | 1d71314424aa | github.com/ | 0.144.0 | 1 |
| treeverse/ | bda61b3fe5d8 | github.com/ | 0.144.0 | 1 |
| treeverse/ | 478f37a6cffc | github.com/ | 0.144.0 | 1 |
| treeverse/ | fb7a0d90f77e | github.com/ | 0.144.0 | 1 |
| tykio/ | 92509e00e618 | github.com/ | 0.144.0 | 1 |
| wallarm/ | 4d45db0ff240 | github.com/ | 0.144.0 | 1 |
| wallarm/ | 097cadc42336 | github.com/ | 0.144.0 | 1 |