Skip to content
OpenAdvisories

Product · Microsoft

OpenAPI.NET

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-72923

    Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion

    The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the model. In Microsoft.OpenApi.Readers versions before 1.6.30 and Microsoft.OpenApi.YamlReader …

    Microsoft OpenAPI.NET Microsoft.OpenApi.YamlReader Microsoft.OpenApi.Readers NuGet
  • High 7.5
    CVE-2026-49451

    Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing

    The OpenAPI.NET SDK contains a useful object model for OpenAPI documents in .NET along with common serializers to extract raw OpenAPI JSON and YAML documents from the model. From 2.0.0-preview11 until 2.7.5 and 3.5.4, a small OpenAPI document containing a cir…

    Microsoft OpenAPI.NET Microsoft.OpenApi NuGet