CVE-2026-77354: Kin Openapi Unvalidated Object Param Decodingcve-2026-77354-kin-openapi-unvalidated-object-param-decoding
Object parameter decoding iterates over schema properties without validating incoming parameter keys against allowed properties when additionalProperties is disabled, or performs unchecked type assertions on parameter maps.