fix(security): 升级 kin-openapi 到 0.131.0 (CVE-2025-30153)

[fly333sky]

🔒 安全修复：CVE-2025-30153

升级 kin-openapi 到 0.131.0。

影响判断

本仓 go.mod 第 8 行声明 github.com/getkin/kin-openapi v0.127.0，与 cve-context.json 中 current_version v0.127.0 一致，落在 CVE-2025-30153 受影响区间 <0.131.0。已将依赖升级至 fixed_version v0.131.0（go.mod 与 go.sum 同步更新，go mod tidy 通过，go build ./... 通过）。组件名 kin-openapi 对应 Go module 路径 github.com/getkin/kin-openapi，cosystem 实际为 go。

验证

• 已跑本仓自带测试（通过）

来源

• CVE issue: CVE-2025-30153 #19
• Resolves CVE-2025-30153 #19

由 opensourceways/backlog cve-batch-fix 流水线自动提交（每日定时批量修复）。

[opensourceways-bot]

Welcome To opensourceways Community

Hey @fly333sky , thanks for your contribution to the community.

Bot Usage Manual

I'm the Bot here serving you. You can find the instructions on how to interact with me at Here . That means you can comment below every pull request or issue to trigger Bot Commands.

Contact Guide

If you have any questions, please contact the SIG: infratructure ,
and any of the maintainers: @GeorgeCao-hw, @TangJia025, @pkking, @zhongjun2 ,
and any of the committers: @TommyLike .

[opensourceways-bot]

CLA Signature Pass

fly333sky, thanks for your pull request. All authors of the commits have signed the CLA. 👍

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	github.com/​getkin/​kin-openapi@​v0.127.0 ⏵ v0.131.0	+1

View full report