Security Feed

See the latest insights and analysis from our MDR team.
RSS for Slack
CVE-2026-93450
By Ido Mizrahi | 
18 September 2026

CVE-2026-93450 – go-openapi/swag jsonutils stack overflow DoS via deeply nested ordered JSON

Uncontrolled recursion in go-openapi/swag/jsonutils ordered JSON marshal/unmarshal lacks a depth limit, enabling remote unauthenticated DoS. Attackers can send deeply nested JSON to services that accept OpenAPI specs, triggering a fatal stack overflow that terminates the process and drops in-flight requests. Affected: github.com/go-openapi/swag/jsonutils `

Full Feed
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Threat RSS
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Main RSS