Microsoft OpenAPI.NET

• CVE-2026-72923 High 7.5 Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion 1.8%
• CVE-2026-49451 High 7.5 Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing 0.7%