diff --git a/.github/workflows/binaries.yml b/.github/workflows/binaries.yml
index 550b18ce..b4dbdb22 100644
--- a/.github/workflows/binaries.yml
+++ b/.github/workflows/binaries.yml
@@ -51,7 +51,7 @@ jobs:
     needs:
       - draft-release
     env:
-      X_GO_DISTRIBUTION: "https://go.dev/dl/go1.23.6.linux-amd64.tar.gz"
+      X_GO_DISTRIBUTION: "https://go.dev/dl/go1.23.7.linux-amd64.tar.gz"
       APIFIREWALL_NAMESPACE: "github.com/wallarm/api-firewall"
     strategy:
       matrix:
@@ -162,7 +162,7 @@ jobs:
     needs:
       - draft-release
     env:
-      X_GO_VERSION: "1.23.6"
+      X_GO_VERSION: "1.23.7"
       APIFIREWALL_NAMESPACE: "github.com/wallarm/api-firewall"
     strategy:
       matrix:
@@ -272,19 +272,19 @@ jobs:
         include:
           - arch: armv6
             distro: bullseye
-            go_distribution: https://go.dev/dl/go1.23.6.linux-armv6l.tar.gz
+            go_distribution: https://go.dev/dl/go1.23.7.linux-armv6l.tar.gz
             artifact: armv6-libc
           - arch: aarch64
             distro: bullseye
-            go_distribution: https://go.dev/dl/go1.23.6.linux-arm64.tar.gz
+            go_distribution: https://go.dev/dl/go1.23.7.linux-arm64.tar.gz
             artifact: arm64-libc
           - arch: armv6
             distro: alpine_latest
-            go_distribution: https://go.dev/dl/go1.23.6.linux-armv6l.tar.gz
+            go_distribution: https://go.dev/dl/go1.23.7.linux-armv6l.tar.gz
             artifact: armv6-musl
           - arch: aarch64
             distro: alpine_latest
-            go_distribution: https://go.dev/dl/go1.23.6.linux-arm64.tar.gz
+            go_distribution: https://go.dev/dl/go1.23.7.linux-arm64.tar.gz
             artifact: arm64-musl
     steps:
       - uses: actions/checkout@v2.1.0
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
index a0d4ae5b..a1e06efd 100644
--- a/.github/workflows/trivy.yml
+++ b/.github/workflows/trivy.yml
@@ -23,22 +23,20 @@ jobs:
     runs-on: "ubuntu-20.04"
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Build an image from Dockerfile
         run: |
           docker build -t wallarm/api-firewall:${{ github.sha }} .
 
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@7b7aa264d83dc58691451798b4d117d53d21edfe
+        uses: aquasecurity/trivy-action@0.28.0
         with:
           image-ref: 'wallarm/api-firewall:${{ github.sha }}'
-          format: 'template'
-          template: '@/contrib/sarif.tpl'
+          format: 'sarif'
           output: 'trivy-results.sarif'
-          severity: 'CRITICAL,HIGH'
 
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v2
+        uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: 'trivy-results.sarif'
diff --git a/Makefile b/Makefile
index 5e8587da..01bc5632 100644
--- a/Makefile
+++ b/Makefile
@@ -1,4 +1,4 @@
-VERSION := 0.8.8
+VERSION := 0.8.9
 NAMESPACE := github.com/wallarm/api-firewall
 
 .DEFAULT_GOAL := build
@@ -39,10 +39,10 @@ vulncheck:
 	govulncheck ./...
 
 stop_k6_tests:
-	@docker-compose -f resources/test/docker-compose-api-mode.yml down
+	@docker compose -f resources/test/docker-compose-api-mode.yml down
 
 run_k6_tests: stop_k6_tests
-	@docker-compose -f resources/test/docker-compose-api-mode.yml up --build --detach --force-recreate
+	@docker compose -f resources/test/docker-compose-api-mode.yml up --build --detach --force-recreate
 	docker run --rm -i --network host grafana/k6 run -v - <resources/test/specification/script.js || true
 	$(MAKE) stop_k6_tests
 
diff --git a/cmd/api-firewall/internal/handlers/proxy/routes.go b/cmd/api-firewall/internal/handlers/proxy/routes.go
index 8e224c66..f96b27b0 100644
--- a/cmd/api-firewall/internal/handlers/proxy/routes.go
+++ b/cmd/api-firewall/internal/handlers/proxy/routes.go
@@ -9,7 +9,7 @@ import (
 	"sync"
 
 	"github.com/corazawaf/coraza/v3"
-	"github.com/golang-jwt/jwt"
+	"github.com/golang-jwt/jwt/v5"
 	"github.com/google/uuid"
 	"github.com/karlseguin/ccache/v2"
 	"github.com/sirupsen/logrus"
diff --git a/cmd/api-firewall/tests/main_api_mode_bench_test.go b/cmd/api-firewall/tests/main_api_mode_bench_test.go
index 87a3375e..18250b2d 100644
--- a/cmd/api-firewall/tests/main_api_mode_bench_test.go
+++ b/cmd/api-firewall/tests/main_api_mode_bench_test.go
@@ -37,7 +37,7 @@ func BenchmarkAPIModeBasic(b *testing.B) {
 
 	handler := handlersAPI.Handlers(&lock, &cfg, shutdown, logger, specStorage, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
diff --git a/cmd/api-firewall/tests/main_api_mode_test.go b/cmd/api-firewall/tests/main_api_mode_test.go
index 8dda6ce6..4ebad2b3 100644
--- a/cmd/api-firewall/tests/main_api_mode_test.go
+++ b/cmd/api-firewall/tests/main_api_mode_test.go
@@ -745,7 +745,7 @@ func (s *APIModeServiceTests) testAPIModeSuccess(t *testing.T) {
 
 	handler := handlersAPI.Handlers(s.lock, &cfg, s.shutdown, s.logger, s.dbSpec, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -777,7 +777,7 @@ func (s *APIModeServiceTests) testAPIModeSuccess(t *testing.T) {
 	checkResponseOkStatusCode(t, &reqCtx, DefaultSchemaID)
 
 	// Repeat request with invalid email
-	reqInvalidEmail, err := json.Marshal(map[string]interface{}{
+	reqInvalidEmail, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -808,7 +808,7 @@ func (s *APIModeServiceTests) testAPIModeMissedMultipleReqParams(t *testing.T) {
 
 	handler := handlersAPI.Handlers(s.lock, &cfg, s.shutdown, s.logger, s.dbSpec, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -840,7 +840,7 @@ func (s *APIModeServiceTests) testAPIModeMissedMultipleReqParams(t *testing.T) {
 	checkResponseOkStatusCode(t, &reqCtx, DefaultSchemaID)
 
 	// Repeat request with invalid email
-	reqInvalidEmail, err := json.Marshal(map[string]interface{}{
+	reqInvalidEmail, err := json.Marshal(map[string]any{
 		"email": "test@wallarm.com",
 	})
 
@@ -850,7 +850,7 @@ func (s *APIModeServiceTests) testAPIModeMissedMultipleReqParams(t *testing.T) {
 
 	req.SetBodyStream(bytes.NewReader(reqInvalidEmail), -1)
 
-	missedParams := map[string]interface{}{
+	missedParams := map[string]any{
 		"firstname": struct{}{},
 		"lastname":  struct{}{},
 	}
@@ -1008,7 +1008,7 @@ func (s *APIModeServiceTests) testAPIModeOneSchemeMultipleIDs(t *testing.T) {
 	handler := handlersAPI.Handlers(s.lock, &cfg, s.shutdown, s.logger, s.dbSpec, nil, nil)
 
 	// one schema
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -1092,7 +1092,7 @@ func (s *APIModeServiceTests) testAPIModeTwoDifferentSchemesMultipleIDs(t *testi
 	handler := handlersAPI.Handlers(s.lock, &cfg, s.shutdown, s.logger, s.dbSpec, nil, nil)
 
 	// one schema
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -1122,7 +1122,7 @@ func (s *APIModeServiceTests) testAPIModeTwoDifferentSchemesMultipleIDs(t *testi
 
 	req.Header.Set(web.XWallarmSchemaIDHeader, fmt.Sprintf("%d", SecondSchemaID))
 
-	p, err = json.Marshal(map[string]interface{}{
+	p, err = json.Marshal(map[string]any{
 		"email": "test@wallarm.com",
 	})
 
@@ -1198,7 +1198,7 @@ func (s *APIModeServiceTests) testAPIModeTwoSchemesMultipleIDs(t *testing.T) {
 
 	handler := handlersAPI.Handlers(s.lock, &cfg, s.shutdown, s.logger, s.dbSpec, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -1247,7 +1247,7 @@ func (s *APIModeServiceTests) testAPIModeTwoSchemesMultipleIDs(t *testing.T) {
 	}
 
 	// Repeat request with invalid email
-	reqInvalidEmail, err := json.Marshal(map[string]interface{}{
+	reqInvalidEmail, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -1330,7 +1330,7 @@ func (s *APIModeServiceTests) testAPIModeInvalidCTParseError(t *testing.T) {
 
 	handler := handlersAPI.Handlers(s.lock, &cfg, s.shutdown, s.logger, s.dbSpec, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -1366,7 +1366,7 @@ func (s *APIModeServiceTests) testAPIModeCTNotInSpec(t *testing.T) {
 
 	handler := handlersAPI.Handlers(s.lock, &cfg, s.shutdown, s.logger, s.dbSpec, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -1426,7 +1426,7 @@ func (s *APIModeServiceTests) testAPIModeNoXWallarmSchemaIDHeader(t *testing.T)
 
 	handler := handlersAPI.Handlers(s.lock, &cfg, s.shutdown, s.logger, s.dbSpec, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -1528,7 +1528,7 @@ func (s *APIModeServiceTests) testAPIModeMethodAndPathNotFound(t *testing.T) {
 
 	handler := handlersAPI.Handlers(s.lock, &cfg, s.shutdown, s.logger, s.dbSpec, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -1731,7 +1731,7 @@ func (s *APIModeServiceTests) testAPIModeRequiredBodyMissed(t *testing.T) {
 
 	handler := handlersAPI.Handlers(s.lock, &cfg, s.shutdown, s.logger, s.dbSpec, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"status":  uuid.New().String(),
 		"testInt": 50,
 		"error":   "test",
@@ -1782,7 +1782,7 @@ func (s *APIModeServiceTests) testAPIModeRequiredBodyParameterMissed(t *testing.
 
 	handler := handlersAPI.Handlers(s.lock, &cfg, s.shutdown, s.logger, s.dbSpec, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"status":  uuid.New().String(),
 		"testInt": 50,
 		"error":   "test",
@@ -1812,7 +1812,7 @@ func (s *APIModeServiceTests) testAPIModeRequiredBodyParameterMissed(t *testing.
 	checkResponseOkStatusCode(t, &reqCtx, DefaultSchemaID)
 
 	// body without required parameter
-	p, err = json.Marshal(map[string]interface{}{
+	p, err = json.Marshal(map[string]any{
 		"error": "test",
 	})
 
@@ -2003,7 +2003,7 @@ func (s *APIModeServiceTests) testAPIModeRequiredBodyParameterInvalidValue(t *te
 
 	handler := handlersAPI.Handlers(s.lock, &cfg, s.shutdown, s.logger, s.dbSpec, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"status":  uuid.New().String(),
 		"testInt": 50,
 		"error":   "test",
@@ -2033,7 +2033,7 @@ func (s *APIModeServiceTests) testAPIModeRequiredBodyParameterInvalidValue(t *te
 	checkResponseOkStatusCode(t, &reqCtx, DefaultSchemaID)
 
 	// body without required parameter
-	p, err = json.Marshal(map[string]interface{}{
+	p, err = json.Marshal(map[string]any{
 		"status":  "invalid_test_value",
 		"testInt": 50,
 		"error":   "test",
@@ -2063,7 +2063,7 @@ func (s *APIModeServiceTests) testAPIModeRequiredBodyParameterInvalidValue(t *te
 	checkResponseForbiddenStatusCode(t, &reqCtx, DefaultSchemaID, []string{validator.ErrCodeRequiredBodyParameterInvalidValue})
 
 	// body with parameter which has invalid type
-	p, err = json.Marshal(map[string]interface{}{
+	p, err = json.Marshal(map[string]any{
 		"status":  uuid.New().String(),
 		"testInt": "invalid_type_str",
 		"error":   "test",
@@ -2093,7 +2093,7 @@ func (s *APIModeServiceTests) testAPIModeRequiredBodyParameterInvalidValue(t *te
 	checkResponseForbiddenStatusCode(t, &reqCtx, DefaultSchemaID, []string{validator.ErrCodeRequiredBodyParameterInvalidValue})
 
 	// body with required parameter that has value less than minimum threshold
-	p, err = json.Marshal(map[string]interface{}{
+	p, err = json.Marshal(map[string]any{
 		"status":  uuid.New().String(),
 		"testInt": 1,
 		"error":   "test",
@@ -2123,7 +2123,7 @@ func (s *APIModeServiceTests) testAPIModeRequiredBodyParameterInvalidValue(t *te
 	checkResponseForbiddenStatusCode(t, &reqCtx, DefaultSchemaID, []string{validator.ErrCodeRequiredBodyParameterInvalidValue})
 
 	// body with required parameter that has value more than maximum threshold
-	p, err = json.Marshal(map[string]interface{}{
+	p, err = json.Marshal(map[string]any{
 		"status":  uuid.New().String(),
 		"testInt": 1000,
 		"error":   "test",
@@ -2365,7 +2365,7 @@ func (s *APIModeServiceTests) testAPIModeUnknownParameterBodyJSON(t *testing.T)
 
 	handler := handlersAPI.Handlers(s.lock, &cfg, s.shutdown, s.logger, s.dbSpec, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname":     "test",
 		"lastname":      "test",
 		"job":           "test",
@@ -2399,7 +2399,7 @@ func (s *APIModeServiceTests) testAPIModeUnknownParameterBodyJSON(t *testing.T)
 	// check response status code and response body
 	checkResponseForbiddenStatusCode(t, &reqCtx, DefaultSchemaID, []string{validator.ErrCodeUnknownParameterFound})
 
-	p, err = json.Marshal(map[string]interface{}{
+	p, err = json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -2690,7 +2690,7 @@ func (s *APIModeServiceTests) testAPIModeInvalidRouteInRequest(t *testing.T) {
 
 	handler := handlersAPI.Handlers(s.lock, &cfg, s.shutdown, s.logger, s.dbSpec, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -2746,7 +2746,7 @@ func (s *APIModeServiceTests) testAPIModeInvalidRouteInRequestInMultipleSchemas(
 
 	handler := handlersAPI.Handlers(s.lock, &cfg, s.shutdown, s.logger, s.dbSpec, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
diff --git a/cmd/api-firewall/tests/main_graphql_test.go b/cmd/api-firewall/tests/main_graphql_test.go
index 93df15c4..2bedae3b 100644
--- a/cmd/api-firewall/tests/main_graphql_test.go
+++ b/cmd/api-firewall/tests/main_graphql_test.go
@@ -211,7 +211,7 @@ func (s *ServiceGraphQLTests) testGQLSuccess(t *testing.T) {
     }
 }
 	`
-	var requestBody = map[string]interface{}{
+	var requestBody = map[string]any{
 		"query": query,
 	}
 
@@ -308,7 +308,7 @@ func (s *ServiceGraphQLTests) testGQLEndpointNotExists(t *testing.T) {
     }
 }
 	`
-	var requestBody = map[string]interface{}{
+	var requestBody = map[string]any{
 		"query": query,
 	}
 
@@ -566,7 +566,7 @@ func (s *ServiceGraphQLTests) testGQLValidationFailed(t *testing.T) {
     }
 }
 	`
-	var requestBody = map[string]interface{}{
+	var requestBody = map[string]any{
 		"query": query,
 	}
 
@@ -655,7 +655,7 @@ func (s *ServiceGraphQLTests) testGQLInvalidQuerySyntax(t *testing.T) {
     }
 };
 	`
-	var requestBody = map[string]interface{}{
+	var requestBody = map[string]any{
 		"query": query,
 	}
 
@@ -743,7 +743,7 @@ func (s *ServiceGraphQLTests) testGQLInvalidMaxComplexity(t *testing.T) {
     }
 }
 	`
-	var requestBody = map[string]interface{}{
+	var requestBody = map[string]any{
 		"query": query,
 	}
 
@@ -831,7 +831,7 @@ func (s *ServiceGraphQLTests) testGQLInvalidMaxDepth(t *testing.T) {
     }
 }
 	`
-	var requestBody = map[string]interface{}{
+	var requestBody = map[string]any{
 		"query": query,
 	}
 
@@ -920,7 +920,7 @@ func (s *ServiceGraphQLTests) testGQLInvalidNodeLimit(t *testing.T) {
 }
 	`
 
-	var requestBody = map[string]interface{}{
+	var requestBody = map[string]any{
 		"query": query,
 	}
 
@@ -1096,7 +1096,7 @@ func (s *ServiceGraphQLTests) testGQLDenylistBlock(t *testing.T) {
     }
 }
 	`
-	var requestBody = map[string]interface{}{
+	var requestBody = map[string]any{
 		"query": query,
 	}
 
@@ -1644,7 +1644,7 @@ func (s *ServiceGraphQLTests) testGQLMaxAliasesNum(t *testing.T) {
     }
 }
 	`
-	var requestBody = map[string]interface{}{
+	var requestBody = map[string]any{
 		"query": query,
 	}
 
@@ -1744,7 +1744,7 @@ func (s *ServiceGraphQLTests) testGQLDuplicateFields(t *testing.T) {
     }
 }
 	`
-	var requestBody = map[string]interface{}{
+	var requestBody = map[string]any{
 		"query": query,
 	}
 
@@ -1825,7 +1825,7 @@ func (s *ServiceGraphQLTests) testGQLDuplicateFields(t *testing.T) {
 }
 	`
 
-	requestBody = map[string]interface{}{
+	requestBody = map[string]any{
 		"query": query,
 	}
 
diff --git a/cmd/api-firewall/tests/main_json_test.go b/cmd/api-firewall/tests/main_json_test.go
index 10247311..46c236d6 100644
--- a/cmd/api-firewall/tests/main_json_test.go
+++ b/cmd/api-firewall/tests/main_json_test.go
@@ -142,7 +142,7 @@ func (s *ServiceTests) testBasicObjJSONFieldValidation(t *testing.T) {
 	handler := proxyHandler.Handlers(s.lock, &apifwCfg, s.serverUrl, s.shutdown, s.logger, s.proxy, s.dbSpec, nil, nil, nil)
 
 	// basic object check
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"valueNum":           10.1,
 		"valueInt":           10,
 		"valueStr":           "testStringValue",
@@ -188,7 +188,7 @@ func (s *ServiceTests) testBasicArrJSONFieldValidation(t *testing.T) {
 
 	handler := proxyHandler.Handlers(s.lock, &apifwCfg, s.serverUrl, s.shutdown, s.logger, s.proxy, s.dbSpec, nil, nil, nil)
 
-	p, err := json.Marshal([]map[string]interface{}{{
+	p, err := json.Marshal([]map[string]any{{
 		"valueNum":           10.1,
 		"valueInt":           10,
 		"valueStr":           "testStringValue",
@@ -249,12 +249,12 @@ func (s *ServiceTests) testNegativeJSONFieldValidation(t *testing.T) {
 	// negative tests
 	negativeTests := []struct {
 		name        string
-		requestBody map[string]interface{}
+		requestBody map[string]any
 	}{
 		// request with invalid valueNum
 		{
 			name: "invalid_value_num",
-			requestBody: map[string]interface{}{
+			requestBody: map[string]any{
 				"valueNum":           "wrongType",
 				"valueInt":           10,
 				"valueStr":           "testStringValue",
@@ -268,7 +268,7 @@ func (s *ServiceTests) testNegativeJSONFieldValidation(t *testing.T) {
 		// request with invalid valueInt
 		{
 			name: "invalid_value_int",
-			requestBody: map[string]interface{}{
+			requestBody: map[string]any{
 				"valueNum":           10.1,
 				"valueInt":           10.1,
 				"valueStr":           "testStringValue",
@@ -282,7 +282,7 @@ func (s *ServiceTests) testNegativeJSONFieldValidation(t *testing.T) {
 		// request with invalid valueStr
 		{
 			name: "invalid_value_str",
-			requestBody: map[string]interface{}{
+			requestBody: map[string]any{
 				"valueNum":           10.1,
 				"valueInt":           10,
 				"valueStr":           10,
@@ -296,7 +296,7 @@ func (s *ServiceTests) testNegativeJSONFieldValidation(t *testing.T) {
 		// request with invalid valueBool
 		{
 			name: "invalid_value_bool",
-			requestBody: map[string]interface{}{
+			requestBody: map[string]any{
 				"valueNum":           10.1,
 				"valueInt":           10,
 				"valueStr":           "testStringValue",
@@ -310,7 +310,7 @@ func (s *ServiceTests) testNegativeJSONFieldValidation(t *testing.T) {
 		// request with invalid valueNumMultipleOf
 		{
 			name: "invalid_value_num_multiple_of",
-			requestBody: map[string]interface{}{
+			requestBody: map[string]any{
 				"valueNum":           10.1,
 				"valueInt":           10,
 				"valueStr":           "testStringValue",
@@ -324,7 +324,7 @@ func (s *ServiceTests) testNegativeJSONFieldValidation(t *testing.T) {
 		// request with invalid valueIntMinMax
 		{
 			name: "invalid_value_int_min_max",
-			requestBody: map[string]interface{}{
+			requestBody: map[string]any{
 				"valueNum":           10.1,
 				"valueInt":           10,
 				"valueStr":           "testStringValue",
@@ -338,7 +338,7 @@ func (s *ServiceTests) testNegativeJSONFieldValidation(t *testing.T) {
 		// request with invalid valueStringMinMax
 		{
 			name: "invalid_value_string_min_max",
-			requestBody: map[string]interface{}{
+			requestBody: map[string]any{
 				"valueNum":           10.1,
 				"valueInt":           10,
 				"valueStr":           "testStringValue",
@@ -352,7 +352,7 @@ func (s *ServiceTests) testNegativeJSONFieldValidation(t *testing.T) {
 		// request with invalid ValueStringEnum
 		{
 			name: "invalid_value_string_enum",
-			requestBody: map[string]interface{}{
+			requestBody: map[string]any{
 				"valueNum":           10.1,
 				"valueInt":           10,
 				"valueStr":           "testStringValue",
diff --git a/cmd/api-firewall/tests/main_test.go b/cmd/api-firewall/tests/main_test.go
index 0bee298d..8a9b68eb 100644
--- a/cmd/api-firewall/tests/main_test.go
+++ b/cmd/api-firewall/tests/main_test.go
@@ -548,7 +548,7 @@ func (s *ServiceTests) testCustomBlockStatusCode(t *testing.T) {
 
 	handler := proxy2.Handlers(s.lock, &cfg, s.serverUrl, s.shutdown, s.logger, s.proxy, s.dbSpec, nil, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -622,7 +622,7 @@ func (s *ServiceTests) testPathNotExists(t *testing.T) {
 
 	handler := proxy2.Handlers(s.lock, &cfg, s.serverUrl, s.shutdown, s.logger, s.proxy, s.dbSpec, nil, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -745,7 +745,7 @@ func (s *ServiceTests) testBlockMode(t *testing.T) {
 
 	handler := proxy2.Handlers(s.lock, &cfg, s.serverUrl, s.shutdown, s.logger, s.proxy, s.dbSpec, nil, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -784,7 +784,7 @@ func (s *ServiceTests) testBlockMode(t *testing.T) {
 	}
 
 	// Repeat request with invalid email
-	reqInvalidEmail, err := json.Marshal(map[string]interface{}{
+	reqInvalidEmail, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -835,7 +835,7 @@ func (s *ServiceTests) testDenylist(t *testing.T) {
 
 	handler := proxy2.Handlers(s.lock, &cfg, s.serverUrl, s.shutdown, s.logger, s.proxy, s.dbSpec, deniedTokens, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -914,7 +914,7 @@ func (s *ServiceTests) testAllowlist(t *testing.T) {
 
 	handler := proxy2.Handlers(s.lock, &cfg, s.serverUrl, s.shutdown, s.logger, s.proxy, s.dbSpec, nil, allowedIPs, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -1012,7 +1012,7 @@ func (s *ServiceTests) testAllowlistXForwardedFor(t *testing.T) {
 
 	handler := proxy2.Handlers(s.lock, &cfg, s.serverUrl, s.shutdown, s.logger, s.proxy, s.dbSpec, nil, allowedIPs, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -1128,7 +1128,7 @@ func (s *ServiceTests) testShadowAPI(t *testing.T) {
 
 	handler := proxy2.Handlers(s.lock, &cfg, s.serverUrl, s.shutdown, s.logger, s.proxy, s.dbSpec, nil, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -1181,7 +1181,7 @@ func (s *ServiceTests) testLogOnlyMode(t *testing.T) {
 
 	handler := proxy2.Handlers(s.lock, &cfg, s.serverUrl, s.shutdown, s.logger, s.proxy, s.dbSpec, nil, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -1235,7 +1235,7 @@ func (s *ServiceTests) testDisableMode(t *testing.T) {
 
 	handler := proxy2.Handlers(s.lock, &cfg, s.serverUrl, s.shutdown, s.logger, s.proxy, s.dbSpec, nil, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"email": "wallarm.com",
 		"url":   "http://wallarm.com",
 	})
@@ -1286,7 +1286,7 @@ func (s *ServiceTests) testBlockLogOnlyMode(t *testing.T) {
 
 	handler := proxy2.Handlers(s.lock, &cfg, s.serverUrl, s.shutdown, s.logger, s.proxy, s.dbSpec, nil, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -1338,7 +1338,7 @@ func (s *ServiceTests) testLogOnlyBlockMode(t *testing.T) {
 
 	handler := proxy2.Handlers(s.lock, &cfg, s.serverUrl, s.shutdown, s.logger, s.proxy, s.dbSpec, nil, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -2137,7 +2137,7 @@ func (s *ServiceTests) testRequestBodyCompression(t *testing.T) {
 
 	for _, encSchema := range testSupportedEncodingSchemas {
 
-		p, err = json.Marshal(map[string]interface{}{
+		p, err = json.Marshal(map[string]any{
 			"firstname": "test",
 			"lastname":  "test",
 			"job":       "test",
@@ -2180,7 +2180,7 @@ func (s *ServiceTests) testRequestBodyCompression(t *testing.T) {
 
 		// Repeat request with wrong JSON in request
 
-		p, err = json.Marshal(map[string]interface{}{
+		p, err = json.Marshal(map[string]any{
 			"firstname": "test",
 			"lastname":  "test",
 			"job":       "test",
@@ -2230,7 +2230,7 @@ func (s *ServiceTests) testResponseBodyCompression(t *testing.T) {
 
 	handler := proxy2.Handlers(s.lock, &cfg, s.serverUrl, s.shutdown, s.logger, s.proxy, s.dbSpec, nil, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -2620,7 +2620,7 @@ func (s *ServiceTests) unknownParamJSONParam(t *testing.T) {
 
 	handler := proxy2.Handlers(s.lock, &cfg, s.serverUrl, s.shutdown, s.logger, s.proxy, s.dbSpec, nil, nil, nil)
 
-	p, err := json.Marshal(map[string]interface{}{
+	p, err := json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
@@ -2658,7 +2658,7 @@ func (s *ServiceTests) unknownParamJSONParam(t *testing.T) {
 			reqCtx.Response.StatusCode())
 	}
 
-	p, err = json.Marshal(map[string]interface{}{
+	p, err = json.Marshal(map[string]any{
 		"firstname": "test",
 		"lastname":  "test",
 		"job":       "test",
diff --git a/cmd/api-firewall/tests/wallarm_api2_update.db b/cmd/api-firewall/tests/wallarm_api2_update.db
index cbfb802f..386d5518 100644
Binary files a/cmd/api-firewall/tests/wallarm_api2_update.db and b/cmd/api-firewall/tests/wallarm_api2_update.db differ
diff --git a/demo/docker-compose/OWASP_CoreRuleSet/docker-compose.yml b/demo/docker-compose/OWASP_CoreRuleSet/docker-compose.yml
index d2e0faeb..6c19dd6f 100644
--- a/demo/docker-compose/OWASP_CoreRuleSet/docker-compose.yml
+++ b/demo/docker-compose/OWASP_CoreRuleSet/docker-compose.yml
@@ -2,7 +2,7 @@ version: "3.8"
 services:
   api-firewall:
     container_name: api-firewall
-    image: wallarm/api-firewall:v0.8.8
+    image: wallarm/api-firewall:v0.8.9
     restart: on-failure
     environment:
       APIFW_URL: "http://0.0.0.0:8080"
diff --git a/demo/docker-compose/docker-compose-api-mode.yml b/demo/docker-compose/docker-compose-api-mode.yml
index adfc47c2..955bada0 100644
--- a/demo/docker-compose/docker-compose-api-mode.yml
+++ b/demo/docker-compose/docker-compose-api-mode.yml
@@ -2,7 +2,7 @@ version: '3.8'
 services:
   api-firewall:
     container_name: api-firewall
-    image: wallarm/api-firewall:v0.8.8
+    image: wallarm/api-firewall:v0.8.9
     restart: on-failure
     environment:
       APIFW_MODE: "api"
diff --git a/demo/docker-compose/docker-compose-graphql-mode.yml b/demo/docker-compose/docker-compose-graphql-mode.yml
index 612c6648..3f98589c 100644
--- a/demo/docker-compose/docker-compose-graphql-mode.yml
+++ b/demo/docker-compose/docker-compose-graphql-mode.yml
@@ -2,7 +2,7 @@ version: '3.8'
 services:
   api-firewall:
     container_name: api-firewall
-    image: wallarm/api-firewall:v0.8.8
+    image: wallarm/api-firewall:v0.8.9
     restart: on-failure
     environment:
       APIFW_MODE: "graphql"
diff --git a/demo/docker-compose/docker-compose.yml b/demo/docker-compose/docker-compose.yml
index 515e0a95..117874a6 100644
--- a/demo/docker-compose/docker-compose.yml
+++ b/demo/docker-compose/docker-compose.yml
@@ -2,7 +2,7 @@ version: "3.8"
 services:
   api-firewall:
     container_name: api-firewall
-    image: wallarm/api-firewall:v0.8.8
+    image: wallarm/api-firewall:v0.8.9
     restart: on-failure
     environment:
       APIFW_URL: "http://0.0.0.0:8080"
diff --git a/docs/release-notes.md b/docs/release-notes.md
index 9813c7d1..4f7059c1 100644
--- a/docs/release-notes.md
+++ b/docs/release-notes.md
@@ -2,6 +2,11 @@
 
 This page describes new releases of Wallarm API Firewall.
 
+## v0.8.9 (2025-03-28)
+
+* Dependency upgrade
+* Update the Go version up to v1.23.7
+
 ## v0.8.8 (2025-02-27)
 
 * Dependency upgrade
diff --git a/go.mod b/go.mod
index c2c0329f..f12c3d93 100644
--- a/go.mod
+++ b/go.mod
@@ -2,20 +2,20 @@ module github.com/wallarm/api-firewall
 
 go 1.23.0
 
-toolchain go1.23.6
+toolchain go1.23.7
 
 require (
 	github.com/andybalholm/brotli v1.1.1
 	github.com/ardanlabs/conf v1.5.0
 	github.com/clbanning/mxj/v2 v2.7.0
-	github.com/corazawaf/coraza/v3 v3.3.2
+	github.com/corazawaf/coraza/v3 v3.3.3
 	github.com/dgraph-io/ristretto v0.2.0
 	github.com/fasthttp/websocket v1.5.12
 	github.com/foxcpp/go-mockdns v1.1.0
 	github.com/gabriel-vasile/mimetype v1.4.8
-	github.com/getkin/kin-openapi v0.124.0
+	github.com/getkin/kin-openapi v0.131.0
 	github.com/go-playground/validator v9.31.0+incompatible
-	github.com/golang-jwt/jwt v3.2.2+incompatible
+	github.com/golang-jwt/jwt/v5 v5.2.2
 	github.com/golang/mock v1.6.0
 	github.com/google/uuid v1.6.0
 	github.com/karlseguin/ccache/v2 v2.0.8
@@ -28,8 +28,8 @@ require (
 	github.com/valyala/fasthttp v1.59.0
 	github.com/valyala/fastjson v1.6.4
 	github.com/wundergraph/graphql-go-tools v1.67.4
-	golang.org/x/exp v0.0.0-20250218142911-aa4b98e5adaa
-	golang.org/x/sync v0.11.0
+	golang.org/x/exp v0.0.0-20250305212735-054e65f0b394
+	golang.org/x/sync v0.12.0
 	gopkg.in/yaml.v3 v3.0.1
 )
 
@@ -51,7 +51,6 @@ require (
 	github.com/hashicorp/golang-lru v0.5.4 // indirect
 	github.com/huandu/xstrings v1.2.1 // indirect
 	github.com/imdario/mergo v0.3.8 // indirect
-	github.com/invopop/yaml v0.3.1 // indirect
 	github.com/jensneuse/abstractlogger v0.0.4 // indirect
 	github.com/jensneuse/byte-template v0.0.0-20200214152254-4f3cf06e5c68 // indirect
 	github.com/jensneuse/pipeline v0.0.0-20200117120358-9fb4de085cd6 // indirect
@@ -66,6 +65,8 @@ require (
 	github.com/nats-io/nats.go v1.34.1 // indirect
 	github.com/nats-io/nkeys v0.4.7 // indirect
 	github.com/nats-io/nuid v1.0.1 // indirect
+	github.com/oasdiff/yaml v0.0.0-20250309154309-f31be36b4037 // indirect
+	github.com/oasdiff/yaml3 v0.0.0-20250309153720-d2182401db90 // indirect
 	github.com/perimeterx/marshmallow v1.1.5 // indirect
 	github.com/petar-dambovaliev/aho-corasick v0.0.0-20240411101913-e07a1f0e8eb4 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
@@ -79,12 +80,12 @@ require (
 	github.com/valyala/bytebufferpool v1.0.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.27.0 // indirect
-	golang.org/x/crypto v0.35.0 // indirect
-	golang.org/x/mod v0.23.0 // indirect
-	golang.org/x/net v0.35.0 // indirect
-	golang.org/x/sys v0.30.0 // indirect
-	golang.org/x/tools v0.30.0 // indirect
-	google.golang.org/protobuf v1.34.2 // indirect
+	golang.org/x/crypto v0.36.0 // indirect
+	golang.org/x/mod v0.24.0 // indirect
+	golang.org/x/net v0.38.0 // indirect
+	golang.org/x/sys v0.31.0 // indirect
+	golang.org/x/tools v0.31.0 // indirect
+	google.golang.org/protobuf v1.35.1 // indirect
 	gopkg.in/cenkalti/backoff.v1 v1.1.0 // indirect
 	gopkg.in/go-playground/assert.v1 v1.2.1 // indirect
 	nhooyr.io/websocket v1.8.17 // indirect
diff --git a/go.sum b/go.sum
index aaca8b1d..94a8a7ae 100644
--- a/go.sum
+++ b/go.sum
@@ -22,8 +22,8 @@ github.com/clbanning/mxj/v2 v2.7.0 h1:WA/La7UGCanFe5NpHF0Q3DNtnCsVoxbPKuyBNHWRyM
 github.com/clbanning/mxj/v2 v2.7.0/go.mod h1:hNiWqW14h+kc+MdF9C6/YoRfjEJoR3ou6tn/Qo+ve2s=
 github.com/corazawaf/coraza-coreruleset v0.0.0-20240226094324-415b1017abdc h1:OlJhrgI3I+FLUCTI3JJW8MoqyM78WbqJjecqMnqG+wc=
 github.com/corazawaf/coraza-coreruleset v0.0.0-20240226094324-415b1017abdc/go.mod h1:7rsocqNDkTCira5T0M7buoKR2ehh7YZiPkzxRuAgvVU=
-github.com/corazawaf/coraza/v3 v3.3.2 h1:eG1HPLySTR9lND6y6fPOajubwbuHRF6aXCsCtxyqKTY=
-github.com/corazawaf/coraza/v3 v3.3.2/go.mod h1:4EqMZkRoil11FnResCT/2JIg61dH+6D7F48VG8SVzuA=
+github.com/corazawaf/coraza/v3 v3.3.3 h1:kqjStHAgWqwP5dh7n0vhTOF0a3t+VikNS/EaMiG0Fhk=
+github.com/corazawaf/coraza/v3 v3.3.3/go.mod h1:xSaXWOhFMSbrV8qOOfBKAyw3aOqfwaSaOy5BgSF8XlA=
 github.com/corazawaf/libinjection-go v0.2.2 h1:Chzodvb6+NXh6wew5/yhD0Ggioif9ACrQGR4qjTCs1g=
 github.com/corazawaf/libinjection-go v0.2.2/go.mod h1:OP4TM7xdJ2skyXqNX1AN1wN5nNZEmJNuWbNPOItn7aw=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
@@ -46,8 +46,8 @@ github.com/foxcpp/go-mockdns v1.1.0 h1:jI0rD8M0wuYAxL7r/ynTrCQQq0BVqfB99Vgk7Dlme
 github.com/foxcpp/go-mockdns v1.1.0/go.mod h1:IhLeSFGed3mJIAXPH2aiRQB+kqz7oqu8ld2qVbOu7Wk=
 github.com/gabriel-vasile/mimetype v1.4.8 h1:FfZ3gj38NjllZIeJAmMhr+qKL8Wu+nOoI3GqacKw1NM=
 github.com/gabriel-vasile/mimetype v1.4.8/go.mod h1:ByKUIKGjh1ODkGM1asKUbQZOLGrPjydw3hYPU2YU9t8=
-github.com/getkin/kin-openapi v0.124.0 h1:VSFNMB9C9rTKBnQ/fpyDU8ytMTr4dWI9QovSKj9kz/M=
-github.com/getkin/kin-openapi v0.124.0/go.mod h1:wb1aSZA/iWmorQP9KTAS/phLj/t17B5jT7+fS8ed9NM=
+github.com/getkin/kin-openapi v0.131.0 h1:NO2UeHnFKRYhZ8wg6Nyh5Cq7dHk4suQQr72a4pMrDxE=
+github.com/getkin/kin-openapi v0.131.0/go.mod h1:3OlG51PCYNsPByuiMB0t4fjnNlIDnaEDsjiKUV8nL58=
 github.com/go-openapi/jsonpointer v0.21.0 h1:YgdVicSA9vH5RiHs9TZW5oyafXZFc6+2Vc1rr/O9oNQ=
 github.com/go-openapi/jsonpointer v0.21.0/go.mod h1:IUyH9l/+uyhIYQ/PXVA41Rexl+kOkAPDdXEYns6fzUY=
 github.com/go-openapi/swag v0.23.0 h1:vsEVJDUo2hPJ2tu0/Xc+4noaxyEffXNIs3cOULZ+GrE=
@@ -60,8 +60,8 @@ github.com/go-playground/validator v9.31.0+incompatible h1:UA72EPEogEnq76ehGdEDp
 github.com/go-playground/validator v9.31.0+incompatible/go.mod h1:yrEkQXlcI+PugkyDjY2bRrL/UBU4f3rvrgkN3V8JEig=
 github.com/go-test/deep v1.0.8 h1:TDsG77qcSprGbC6vTN8OuXp5g+J+b5Pcguhf7Zt61VM=
 github.com/go-test/deep v1.0.8/go.mod h1:5C2ZWiW0ErCdrYzpqxLbTX7MG14M9iiw8DgHncVwcsE=
-github.com/golang-jwt/jwt v3.2.2+incompatible h1:IfV12K8xAKAnZqdXVzCZ+TOjboZ2keLg81eXfW3O+oY=
-github.com/golang-jwt/jwt v3.2.2+incompatible/go.mod h1:8pz2t5EyA70fFQQSrl6XZXzqecmYZeUEB8OUGHkxJ+I=
+github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8=
+github.com/golang-jwt/jwt/v5 v5.2.2/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 github.com/golang/mock v1.6.0 h1:ErTB+efbowRARo13NNdxyJji2egdxLGQhRaY+DUumQc=
 github.com/golang/mock v1.6.0/go.mod h1:p6yTPP+5HYm5mzsMV8JkE6ZKdX+/wYM6Hr+LicevLPs=
 github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
@@ -83,8 +83,6 @@ github.com/huandu/xstrings v1.2.1 h1:v6IdmkCnDhJG/S0ivr58PeIfg+tyhqQYy4YsCsQ0Pdc
 github.com/huandu/xstrings v1.2.1/go.mod h1:y5/lhBue+AyNmUVz9RLU9xbLR0o4KIIExikq4ovT0aE=
 github.com/imdario/mergo v0.3.8 h1:CGgOkSJeqMRmt0D9XLWExdT4m4F1vd3FV3VPt+0VxkQ=
 github.com/imdario/mergo v0.3.8/go.mod h1:2EnlNZ0deacrJVfApfmtdGgDfMuh/nq6Ok1EcJh5FfA=
-github.com/invopop/yaml v0.3.1 h1:f0+ZpmhfBSS4MhG+4HYseMdJhoeeopbSKbq5Rpeelso=
-github.com/invopop/yaml v0.3.1/go.mod h1:PMOp3nn4/12yEZUFfmOuNHJsZToEEOwoWsT+D81KkeA=
 github.com/jcchavezs/mergefs v0.1.0 h1:7oteO7Ocl/fnfFMkoVLJxTveCjrsd//UB0j89xmnpec=
 github.com/jcchavezs/mergefs v0.1.0/go.mod h1:eRLTrsA+vFwQZ48hj8p8gki/5v9C2bFtHH5Mnn4bcGk=
 github.com/jensneuse/abstractlogger v0.0.4 h1:sa4EH8fhWk3zlTDbSncaWKfwxYM8tYSlQ054ETLyyQY=
@@ -143,6 +141,10 @@ github.com/nats-io/nkeys v0.4.7 h1:RwNJbbIdYCoClSDNY7QVKZlyb/wfT6ugvFCiKy6vDvI=
 github.com/nats-io/nkeys v0.4.7/go.mod h1:kqXRgRDPlGy7nGaEDMuYzmiJCIAAWDK0IMBtDmGD0nc=
 github.com/nats-io/nuid v1.0.1 h1:5iA8DT8V7q8WK2EScv2padNa/rTESc1KdnPw4TC2paw=
 github.com/nats-io/nuid v1.0.1/go.mod h1:19wcPz3Ph3q0Jbyiqsd0kePYG7A95tJPxeL+1OSON2c=
+github.com/oasdiff/yaml v0.0.0-20250309154309-f31be36b4037 h1:G7ERwszslrBzRxj//JalHPu/3yz+De2J+4aLtSRlHiY=
+github.com/oasdiff/yaml v0.0.0-20250309154309-f31be36b4037/go.mod h1:2bpvgLBZEtENV5scfDFEtB/5+1M4hkQhDQrccEJ/qGw=
+github.com/oasdiff/yaml3 v0.0.0-20250309153720-d2182401db90 h1:bQx3WeLcUWy+RletIKwUIt4x3t8n2SxavmoclizMb8c=
+github.com/oasdiff/yaml3 v0.0.0-20250309153720-d2182401db90/go.mod h1:y5+oSEHCPT/DGrS++Wc/479ERge0zTFxaF8PbGKcg2o=
 github.com/perimeterx/marshmallow v1.1.5 h1:a2LALqQ1BlHM8PZblsDdidgv1mWi1DgC2UmX50IvK2s=
 github.com/perimeterx/marshmallow v1.1.5/go.mod h1:dsXbUu8CRzfYP5a87xpp0xq9S3u0Vchtcl8we9tYaXw=
 github.com/petar-dambovaliev/aho-corasick v0.0.0-20240411101913-e07a1f0e8eb4 h1:1Kw2vDBXmjop+LclnzCb/fFy+sgb3gYARwfmoUcQe6o=
@@ -229,10 +231,10 @@ golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5y
 golang.org/x/crypto v0.13.0/go.mod h1:y6Z2r+Rw4iayiXXAIxJIDAJ1zMW4yaTpebo8fPOliYc=
 golang.org/x/crypto v0.14.0/go.mod h1:MVFd36DqK4CsrnJYDkBA3VC4m2GkXAM0PvzMCn4JQf4=
 golang.org/x/crypto v0.15.0/go.mod h1:4ChreQoLWfG3xLDer1WdlH5NdlQ3+mwnQq1YTKY+72g=
-golang.org/x/crypto v0.35.0 h1:b15kiHdrGCHrP6LvwaQ3c03kgNhhiMgvlhxHQhmg2Xs=
-golang.org/x/crypto v0.35.0/go.mod h1:dy7dXNW32cAb/6/PRuTNsix8T+vJAqvuIy5Bli/x0YQ=
-golang.org/x/exp v0.0.0-20250218142911-aa4b98e5adaa h1:t2QcU6V556bFjYgu4L6C+6VrCPyJZ+eyRsABUPs1mz4=
-golang.org/x/exp v0.0.0-20250218142911-aa4b98e5adaa/go.mod h1:BHOTPb3L19zxehTsLoJXVaTktb06DFgmdW6Wb9s8jqk=
+golang.org/x/crypto v0.36.0 h1:AnAEvhDddvBdpY+uR+MyHmuZzzNqXSe/GvuDeob5L34=
+golang.org/x/crypto v0.36.0/go.mod h1:Y4J0ReaxCR1IMaabaSMugxJES1EpwhBHhv2bDHklZvc=
+golang.org/x/exp v0.0.0-20250305212735-054e65f0b394 h1:nDVHiLt8aIbd/VzvPWN6kSOPE7+F/fNFDSXLVYkE/Iw=
+golang.org/x/exp v0.0.0-20250305212735-054e65f0b394/go.mod h1:sIifuuw/Yco/y6yb6+bDNfyeQ/MdPUy/hKEMYQV17cM=
 golang.org/x/lint v0.0.0-20190930215403-16217165b5de/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
 golang.org/x/mod v0.0.0-20190513183733-4bf6d317e70e/go.mod h1:mXi4GBBbnImb6dmsKGUJ2LatrhH/nqhxcFungHvyanc=
 golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
@@ -240,8 +242,8 @@ golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91
 golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/mod v0.12.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/mod v0.14.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
-golang.org/x/mod v0.23.0 h1:Zb7khfcRGKk+kqfxFaP5tZqCnDZMjC5VtUBs87Hr6QM=
-golang.org/x/mod v0.23.0/go.mod h1:6SkKJ3Xj0I0BrPOZoBy3bdMptDDU9oJrpohJ3eWZ1fY=
+golang.org/x/mod v0.24.0 h1:ZfthKaKaT4NrhGVZHO1/WDTwGES4De8KtWO0SIbNJMU=
+golang.org/x/mod v0.24.0/go.mod h1:IXM97Txy2VM4PJ3gI61r1YEk/gAj6zAHN3AdZt6S9Ww=
 golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
@@ -254,8 +256,8 @@ golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
 golang.org/x/net v0.15.0/go.mod h1:idbUs1IY1+zTqbi8yxTbhexhEEk5ur9LInksu6HrEpk=
 golang.org/x/net v0.17.0/go.mod h1:NxSsAGuq816PNPmqtQdLE42eU2Fs7NoRIZrHJAlaCOE=
 golang.org/x/net v0.18.0/go.mod h1:/czyP5RqHAH4odGYxBJ1qz0+CE5WZ+2j1YgoEo8F2jQ=
-golang.org/x/net v0.35.0 h1:T5GQRQb2y08kTAByq9L4/bz8cipCdA8FbRTXewonqY8=
-golang.org/x/net v0.35.0/go.mod h1:EglIi67kWsHKlRzzVMUD93VMSWGFOMSZgxFjparz1Qk=
+golang.org/x/net v0.38.0 h1:vRMAPTMaeGqVhG5QyLJHqNDwecKTomGeqbnfZyKlBI8=
+golang.org/x/net v0.38.0/go.mod h1:ivrbrMbzFq5J41QOQh0siUuly180yBYtLp+CKbEaFx8=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -263,8 +265,8 @@ golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.3.0/go.mod h1:FU7BRWz2tNW+3quACPkgCx/L+uEAv1htQ0V83Z9Rj+Y=
 golang.org/x/sync v0.4.0/go.mod h1:FU7BRWz2tNW+3quACPkgCx/L+uEAv1htQ0V83Z9Rj+Y=
 golang.org/x/sync v0.5.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
-golang.org/x/sync v0.11.0 h1:GGz8+XQP4FvTTrjZPzNKTMFtSXH80RAzG+5ghFPgK9w=
-golang.org/x/sync v0.11.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
+golang.org/x/sync v0.12.0 h1:MHc5BpPuC30uJk597Ri8TV3CNZcTLu6B6z4lJy+g6Jw=
+golang.org/x/sync v0.12.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20190422165155-953cdadca894/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -280,8 +282,8 @@ golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.13.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.14.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
-golang.org/x/sys v0.30.0 h1:QjkSwP/36a20jFYWkSue1YwXzLmsV5Gfq7Eiy72C1uc=
-golang.org/x/sys v0.30.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.31.0 h1:ioabZlmFYtWhL+TRYpcnNlLwhyxaM9kWTDEmfnprqik=
+golang.org/x/sys v0.31.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
@@ -308,13 +310,13 @@ golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc
 golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
 golang.org/x/tools v0.13.0/go.mod h1:HvlwmtVNQAhOuCjW7xxvovg8wbNq7LwfXh/k7wXUl58=
 golang.org/x/tools v0.15.0/go.mod h1:hpksKq4dtpQWS1uQ61JkdqWM3LscIS6Slf+VVkm+wQk=
-golang.org/x/tools v0.30.0 h1:BgcpHewrV5AUp2G9MebG4XPFI1E2W41zU1SaqVA9vJY=
-golang.org/x/tools v0.30.0/go.mod h1:c347cR/OJfw5TI+GfX7RUPNMdDRRbjvYTS0jPyvsVtY=
+golang.org/x/tools v0.31.0 h1:0EedkvKDbh+qistFTd0Bcwe/YLh4vHwWEkiI0toFIBU=
+golang.org/x/tools v0.31.0/go.mod h1:naFTU+Cev749tSJRXJlna0T3WxKvb1kWEx15xA4SdmQ=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
-google.golang.org/protobuf v1.34.2 h1:6xV6lTsCfpGD21XK49h7MhtcApnLqkfYgPcdHftf6hg=
-google.golang.org/protobuf v1.34.2/go.mod h1:qYOHts0dSfpeUzUFpOMr/WGzszTmLH+DiWniOlNbLDw=
+google.golang.org/protobuf v1.35.1 h1:m3LfL6/Ca+fqnjnlqQXNpFPABW1UD7mjh8KO2mKFytA=
+google.golang.org/protobuf v1.35.1/go.mod h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojtC/QF5bRE=
 gopkg.in/cenkalti/backoff.v1 v1.1.0 h1:Arh75ttbsvlpVA7WtVpH4u9h6Zl46xuptxqLxPiSo4Y=
 gopkg.in/cenkalti/backoff.v1 v1.1.0/go.mod h1:J6Vskwqd+OMVJl8C33mmtxTBs2gyzfv7UDAkHu8BrjI=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
diff --git a/helm/api-firewall/Chart.yaml b/helm/api-firewall/Chart.yaml
index db2d60aa..b3742189 100644
--- a/helm/api-firewall/Chart.yaml
+++ b/helm/api-firewall/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: api-firewall
 version: 0.7.2
-appVersion: 0.8.8
+appVersion: 0.8.9
 description: Wallarm OpenAPI-based API Firewall
 home: https://github.com/wallarm/api-firewall
 icon: https://static.wallarm.com/wallarm-logo.svg
diff --git a/internal/platform/loader/loader.go b/internal/platform/loader/loader.go
index 926389e5..7db089b4 100644
--- a/internal/platform/loader/loader.go
+++ b/internal/platform/loader/loader.go
@@ -34,11 +34,11 @@ func ParseOAS(schema []byte, SchemaVersion string, schemaID int) (*openapi3.T, e
 	loader := openapi3.NewLoader()
 	parsedSpec, err := loader.LoadFromData(schema)
 	if err != nil {
-		return nil, fmt.Errorf("%w: schema version %s, schema ID %d: %w", ErrOASParsing, SchemaVersion, schemaID, err)
+		return nil, fmt.Errorf("%w: schema version '%s', schema ID %d: %w", ErrOASParsing, SchemaVersion, schemaID, err)
 	}
 
 	if err := validateOAS(parsedSpec); err != nil {
-		return nil, fmt.Errorf("%w: schema version %s, schema ID %d: %w: ", ErrOASValidation, SchemaVersion, schemaID, err)
+		return nil, fmt.Errorf("%w: schema version '%s', schema ID %d: %w: ", ErrOASValidation, SchemaVersion, schemaID, err)
 	}
 
 	return parsedSpec, nil
diff --git a/internal/platform/oauth2/introspection.go b/internal/platform/oauth2/introspection.go
index 178dce54..900cd012 100644
--- a/internal/platform/oauth2/introspection.go
+++ b/internal/platform/oauth2/introspection.go
@@ -33,7 +33,7 @@ func (i *Introspection) Validate(ctx context.Context, tokenWithBearer string, sc
 		return errors.New("oauth token not found")
 	}
 
-	var meta map[string]interface{}
+	var meta map[string]any
 	var err error
 
 	metaCached := i.Cache.Get(tokenString)
@@ -44,7 +44,7 @@ func (i *Introspection) Validate(ctx context.Context, tokenWithBearer string, sc
 			return err
 		}
 	default:
-		meta = metaCached.Value().(map[string]interface{})
+		meta = metaCached.Value().(map[string]any)
 	}
 
 	scopeString, ok := meta["scope"].(string)
@@ -72,7 +72,7 @@ func (i *Introspection) Validate(ctx context.Context, tokenWithBearer string, sc
 	return nil
 }
 
-func (i *Introspection) getTokenMetaInfo(token string) (map[string]interface{}, error) {
+func (i *Introspection) getTokenMetaInfo(token string) (map[string]any, error) {
 
 	req := fasthttp.AcquireRequest()
 	req.Header.SetMethod(i.Cfg.Introspection.EndpointMethod)
@@ -128,7 +128,7 @@ func (i *Introspection) getTokenMetaInfo(token string) (map[string]interface{},
 
 	body := res.Body()
 
-	var tokenStatus map[string]interface{}
+	var tokenStatus map[string]any
 	if err := json.Unmarshal(body, &tokenStatus); err != nil {
 		return nil, fmt.Errorf("failed to unmarshal extension properties: %v (%s)", err, body)
 	}
diff --git a/internal/platform/oauth2/jwt.go b/internal/platform/oauth2/jwt.go
index 30d56a77..8f0a510d 100644
--- a/internal/platform/oauth2/jwt.go
+++ b/internal/platform/oauth2/jwt.go
@@ -6,9 +6,10 @@ import (
 	"fmt"
 	"strings"
 
-	"github.com/golang-jwt/jwt"
+	"github.com/golang-jwt/jwt/v5"
 	"github.com/pkg/errors"
 	"github.com/sirupsen/logrus"
+
 	"github.com/wallarm/api-firewall/internal/config"
 )
 
@@ -25,10 +26,10 @@ func (j *JWT) Validate(ctx context.Context, tokenWithBearer string, scopes []str
 
 	type MyCustomClaims struct {
 		Scope string `json:"scope"`
-		jwt.StandardClaims
+		jwt.RegisteredClaims
 	}
 
-	token, err := jwt.ParseWithClaims(tokenString, &MyCustomClaims{}, func(token *jwt.Token) (interface{}, error) {
+	token, err := jwt.ParseWithClaims(tokenString, &MyCustomClaims{}, func(token *jwt.Token) (any, error) {
 
 		switch j.Cfg.JWT.SignatureAlgorithm {
 		case "RS256", "RS384", "RS512":
@@ -52,7 +53,7 @@ func (j *JWT) Validate(ctx context.Context, tokenWithBearer string, scopes []str
 
 	claims, ok := token.Claims.(*MyCustomClaims)
 	if ok && token.Valid {
-		j.Logger.Debugf("%v %v", claims.Scope, claims.StandardClaims.ExpiresAt)
+		j.Logger.Debugf("%v %v", claims.Scope, claims.RegisteredClaims.ExpiresAt)
 	} else {
 		return errors.New("oauth2 token invalid")
 	}
diff --git a/internal/platform/router/context.go b/internal/platform/router/context.go
index 7a6dba77..e7d4a941 100644
--- a/internal/platform/router/context.go
+++ b/internal/platform/router/context.go
@@ -151,7 +151,7 @@ func (s *RouteParams) Add(key, value string) {
 }
 
 // contextKey is a value for use with context.WithValue. It's used as
-// a pointer so it fits in an interface{} without allocation. This technique
+// a pointer so it fits in an any without allocation. This technique
 // for defining context keys was copied from Go 1.7's new use of context in net/http.
 type contextKey struct {
 	name string
diff --git a/internal/platform/storage/dbv1.go b/internal/platform/storage/dbv1.go
index 4a2c91a8..9206b375 100644
--- a/internal/platform/storage/dbv1.go
+++ b/internal/platform/storage/dbv1.go
@@ -135,7 +135,7 @@ func (s *SQLLiteV1) Specification(schemaID int) *openapi3.T {
 	return spec
 }
 
-func (s *SQLLiteV1) SpecificationRaw(schemaID int) interface{} {
+func (s *SQLLiteV1) SpecificationRaw(schemaID int) any {
 	s.lock.RLock()
 	defer s.lock.RUnlock()
 
diff --git a/internal/platform/storage/dbv2.go b/internal/platform/storage/dbv2.go
index 02a451da..f9e87ed4 100644
--- a/internal/platform/storage/dbv2.go
+++ b/internal/platform/storage/dbv2.go
@@ -138,7 +138,7 @@ func (s *SQLLiteV2) Specification(schemaID int) *openapi3.T {
 	return spec
 }
 
-func (s *SQLLiteV2) SpecificationRaw(schemaID int) interface{} {
+func (s *SQLLiteV2) SpecificationRaw(schemaID int) any {
 	s.lock.RLock()
 	defer s.lock.RUnlock()
 
diff --git a/internal/platform/storage/file.go b/internal/platform/storage/file.go
index 46f78ef3..32971dfc 100644
--- a/internal/platform/storage/file.go
+++ b/internal/platform/storage/file.go
@@ -93,7 +93,7 @@ func (s *File) Specification(_ int) *openapi3.T {
 	return s.OpenAPISpec
 }
 
-func (s *File) SpecificationRaw(_ int) interface{} {
+func (s *File) SpecificationRaw(_ int) any {
 	s.lock.RLock()
 	defer s.lock.RUnlock()
 
diff --git a/internal/platform/storage/storage.go b/internal/platform/storage/storage.go
index 105930ea..fd43e4de 100644
--- a/internal/platform/storage/storage.go
+++ b/internal/platform/storage/storage.go
@@ -13,7 +13,7 @@ import (
 type DBOpenAPILoader interface {
 	Load(dbStoragePath string) (bool, error)
 	AfterLoad(dbStoragePath string) error
-	SpecificationRaw(schemaID int) interface{}
+	SpecificationRaw(schemaID int) any
 	SpecificationRawContent(schemaID int) []byte
 	SpecificationVersion(schemaID int) string
 	Specification(schemaID int) *openapi3.T
diff --git a/internal/platform/storage/storage_mock.go b/internal/platform/storage/storage_mock.go
index 64dd67be..71908c4e 100644
--- a/internal/platform/storage/storage_mock.go
+++ b/internal/platform/storage/storage_mock.go
@@ -134,10 +134,10 @@ func (mr *MockDBOpenAPILoaderMockRecorder) Specification(schemaID interface{}) *
 }
 
 // SpecificationRaw mocks base method.
-func (m *MockDBOpenAPILoader) SpecificationRaw(schemaID int) interface{} {
+func (m *MockDBOpenAPILoader) SpecificationRaw(schemaID int) any {
 	m.ctrl.T.Helper()
 	ret := m.ctrl.Call(m, "SpecificationRaw", schemaID)
-	ret0, _ := ret[0].(interface{})
+	ret0, _ := ret[0].(any)
 	return ret0
 }
 
diff --git a/internal/platform/storage/url.go b/internal/platform/storage/url.go
index 660d5839..b169ca9f 100644
--- a/internal/platform/storage/url.go
+++ b/internal/platform/storage/url.go
@@ -115,7 +115,7 @@ func (u *URL) Specification(_ int) *openapi3.T {
 	return u.OpenAPISpec
 }
 
-func (u *URL) SpecificationRaw(_ int) interface{} {
+func (u *URL) SpecificationRaw(_ int) any {
 	u.lock.RLock()
 	defer u.lock.RUnlock()
 
diff --git a/internal/platform/validator/internal.go b/internal/platform/validator/internal.go
index 65fcb897..1fbceb05 100644
--- a/internal/platform/validator/internal.go
+++ b/internal/platform/validator/internal.go
@@ -40,16 +40,16 @@ func isNilValue(value any) bool {
 	return false
 }
 
-func convertToMap(v *fastjson.Value) interface{} {
+func convertToMap(v *fastjson.Value) any {
 	switch v.Type() {
 	case fastjson.TypeObject:
-		m := make(map[string]interface{})
+		m := make(map[string]any)
 		v.GetObject().Visit(func(k []byte, v *fastjson.Value) {
 			m[string(k)] = convertToMap(v)
 		})
 		return m
 	case fastjson.TypeArray:
-		var a []interface{}
+		var a []any
 		for _, v := range v.GetArray() {
 			a = append(a, convertToMap(v))
 		}
diff --git a/internal/platform/validator/issue1045_test.go b/internal/platform/validator/issue1045_test.go
new file mode 100644
index 00000000..5154a7c0
--- /dev/null
+++ b/internal/platform/validator/issue1045_test.go
@@ -0,0 +1,145 @@
+package validator
+
+import (
+	"net/http"
+	"strings"
+	"testing"
+
+	"github.com/getkin/kin-openapi/openapi3"
+	"github.com/getkin/kin-openapi/openapi3filter"
+	"github.com/getkin/kin-openapi/routers/gorillamux"
+	"github.com/stretchr/testify/require"
+	"github.com/valyala/fastjson"
+)
+
+func TestIssue1045(t *testing.T) {
+	spec := `
+openapi: 3.0.3
+info:
+  version: 1.0.0
+  title: sample api
+  description: api service paths to test the issue
+paths:
+  /api/path:
+    post:
+      summary: path
+      tags:
+        - api
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema: { $ref: '#/components/schemas/PathRequest' }
+          application/x-www-form-urlencoded:
+            schema: { $ref: '#/components/schemas/PathRequest' }
+      responses:
+        '200':
+          description: Ok
+          content:
+            application/json:
+              schema: { $ref: '#/components/schemas/PathResponse' }
+components:
+  schemas:
+    Msg_Opt:
+      properties:
+        msg: { type: string }
+    Msg:
+      allOf:
+        - $ref: '#/components/schemas/Msg_Opt'
+        - required: [ msg ]
+    Name:
+      properties:
+        name: { type: string }
+      required: [ name ]
+    Id:
+      properties:
+        id:
+          type: string
+          format: uint64
+      required: [ id ]
+    PathRequest:
+      type: object
+      allOf:
+        - $ref: '#/components/schemas/Msg'
+        - $ref: '#/components/schemas/Name'
+    PathResponse:
+      type: object
+      allOf:
+        - $ref: '#/components/schemas/PathRequest'
+        - $ref: '#/components/schemas/Id'
+    `[1:]
+
+	loader := openapi3.NewLoader()
+
+	doc, err := loader.LoadFromData([]byte(spec))
+	require.NoError(t, err)
+
+	err = doc.Validate(loader.Context)
+	require.NoError(t, err)
+
+	router, err := gorillamux.NewRouter(doc)
+	require.NoError(t, err)
+
+	for _, testcase := range []struct {
+		name       string
+		endpoint   string
+		ct         string
+		data       string
+		shouldFail bool
+	}{
+		{
+			name:       "json success",
+			endpoint:   "/api/path",
+			ct:         "application/json",
+			data:       `{"msg":"message", "name":"some+name"}`,
+			shouldFail: false,
+		},
+		{
+			name:       "json failure",
+			endpoint:   "/api/path",
+			ct:         "application/json",
+			data:       `{"name":"some+name"}`,
+			shouldFail: true,
+		},
+
+		// application/x-www-form-urlencoded
+		{
+			name:       "form success",
+			endpoint:   "/api/path",
+			ct:         "application/x-www-form-urlencoded",
+			data:       "msg=message&name=some+name",
+			shouldFail: false,
+		},
+		{
+			name:       "form failure",
+			endpoint:   "/api/path",
+			ct:         "application/x-www-form-urlencoded",
+			data:       "name=some+name",
+			shouldFail: true,
+		},
+	} {
+		t.Run(testcase.name, func(t *testing.T) {
+			data := strings.NewReader(testcase.data)
+			req, err := http.NewRequest("POST", testcase.endpoint, data)
+			require.NoError(t, err)
+			req.Header.Add("Content-Type", testcase.ct)
+
+			route, pathParams, err := router.FindRoute(req)
+			require.NoError(t, err)
+
+			validationInput := &openapi3filter.RequestValidationInput{
+				Request:    req,
+				PathParams: pathParams,
+				Route:      route,
+			}
+
+			jsonParser := &fastjson.Parser{}
+			err = ValidateRequest(loader.Context, validationInput, jsonParser)
+			if testcase.shouldFail {
+				require.Error(t, err, "This test case should fail "+testcase.data)
+			} else {
+				require.NoError(t, err, "This test case should pass "+testcase.data)
+			}
+		})
+	}
+}
diff --git a/internal/platform/validator/issue267_test.go b/internal/platform/validator/issue267_test.go
new file mode 100644
index 00000000..5ceede31
--- /dev/null
+++ b/internal/platform/validator/issue267_test.go
@@ -0,0 +1,299 @@
+package validator
+
+import (
+	"net/http"
+	"strings"
+	"testing"
+
+	"github.com/getkin/kin-openapi/openapi3"
+	"github.com/getkin/kin-openapi/openapi3filter"
+	"github.com/getkin/kin-openapi/routers/gorillamux"
+	"github.com/stretchr/testify/require"
+	"github.com/valyala/fastjson"
+)
+
+func TestIssue267(t *testing.T) {
+	spec := `
+openapi: 3.0.0
+info:
+  description: This is a sample of the API
+  version: 1.0.0
+  title: sample API
+tags:
+  - name: authorization
+    description: Create and validate authorization tokens using oauth
+paths:
+  /oauth2/token:
+    post:
+      tags:
+        - authorization
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/AccessTokenRequest'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/AccessTokenRequest'
+      responses:
+        '200':
+          description: 'The request was successful and a token was issued.'
+  /oauth2/any-token:
+    post:
+      tags:
+        - authorization
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/AnyTokenRequest'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/AnyTokenRequest'
+      responses:
+        '200':
+          description: 'Any type of token request was successful.'
+  /oauth2/all-token:
+    post:
+      tags:
+        - authorization
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/AllTokenRequest'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/AllTokenRequest'
+      responses:
+        '200':
+          description: 'All type of token request was successful.'
+components:
+  schemas:
+    AccessTokenRequest:
+      description: 'Describes all of the potential access token requests that can be received'
+      type: object
+      oneOf:
+        - $ref: '#/components/schemas/ClientCredentialsTokenRequest'
+        - $ref: '#/components/schemas/RefreshTokenRequest'
+    ClientCredentialsTokenRequest:
+      description: 'The client_id and client_secret properties should only be sent in form data if the client does not support basic authentication for sending client credentials.'
+      type: object
+      properties:
+        grant_type:
+          type: string
+          enum:
+            - client_credentials
+        scope:
+          type: string
+        client_id:
+          type: string
+        client_secret:
+          type: string
+      required:
+        - grant_type
+        - scope
+        - client_id
+        - client_secret
+    RefreshTokenRequest:
+      type: object
+      properties:
+        grant_type:
+          type: string
+          enum:
+            - refresh_token
+        client_id:
+          type: string
+        refresh_token:
+          type: string
+      required:
+        - grant_type
+        - client_id
+        - refresh_token
+    AnyTokenRequest:
+      type: object
+      anyOf:
+        - $ref: '#/components/schemas/ClientCredentialsTokenRequest'
+        - $ref: '#/components/schemas/RefreshTokenRequest'
+        - $ref: '#/components/schemas/AdditionalTokenRequest'
+    AdditionalTokenRequest:
+      type: object
+      properties:
+        grant_type:
+          type: string
+          enum:
+            - additional_grant
+        additional_info:
+          type: string
+      required:
+        - grant_type
+        - additional_info
+    AllTokenRequest:
+      type: object
+      allOf:
+        - $ref: '#/components/schemas/ClientCredentialsTokenRequest'
+        - $ref: '#/components/schemas/TrackingInfo'
+    TrackingInfo:
+      type: object
+      properties:
+        tracking_id:
+          type: string
+      required:
+        - tracking_id
+    `[1:]
+
+	loader := openapi3.NewLoader()
+
+	doc, err := loader.LoadFromData([]byte(spec))
+	require.NoError(t, err)
+
+	err = doc.Validate(loader.Context)
+	require.NoError(t, err)
+
+	router, err := gorillamux.NewRouter(doc)
+	require.NoError(t, err)
+
+	for _, testcase := range []struct {
+		endpoint   string
+		ct         string
+		data       string
+		shouldFail bool
+	}{
+		// application/json
+		{
+			endpoint:   "/oauth2/token",
+			ct:         "application/json",
+			data:       `{"grant_type":"client_credentials", "scope":"testscope", "client_id":"myclient", "client_secret":"mypass"}`,
+			shouldFail: false,
+		},
+		{
+			endpoint:   "/oauth2/token",
+			ct:         "application/json",
+			data:       `{"grant_type":"client_credentials", "scope":"testscope", "client_id":"myclient", "client_secret":"mypass","request":1}`,
+			shouldFail: false,
+		},
+		{
+			endpoint:   "/oauth2/any-token",
+			ct:         "application/json",
+			data:       `{"grant_type":"client_credentials", "scope":"testscope", "client_id":"myclient", "client_secret":"mypass"}`,
+			shouldFail: false,
+		},
+		{
+			endpoint:   "/oauth2/any-token",
+			ct:         "application/json",
+			data:       `{"grant_type":"refresh_token", "client_id":"myclient", "refresh_token":"someRefreshToken"}`,
+			shouldFail: false,
+		},
+		{
+			endpoint:   "/oauth2/any-token",
+			ct:         "application/json",
+			data:       `{"grant_type":"additional_grant", "additional_info":"extraInfo"}`,
+			shouldFail: false,
+		},
+		{
+			endpoint:   "/oauth2/any-token",
+			ct:         "application/json",
+			data:       `{"grant_type":"invalid_grant", "extra_field":"extraValue"}`,
+			shouldFail: true,
+		},
+		{
+			endpoint: "/oauth2/all-token",
+			ct:       "application/json",
+			data: `{
+		      "grant_type": "client_credentials",
+		      "scope": "testscope",
+		      "client_id": "myclient",
+		      "client_secret": "mypass",
+		      "tracking_id": "123456"
+		  }`,
+			shouldFail: false,
+		},
+
+		{
+			endpoint:   "/oauth2/all-token",
+			ct:         "application/json",
+			data:       `{"grant_type":"invalid", "client_id":"myclient", "extra_field":"extraValue"}`,
+			shouldFail: true,
+		},
+
+		// application/x-www-form-urlencoded
+		{
+			endpoint:   "/oauth2/token",
+			ct:         "application/x-www-form-urlencoded",
+			data:       "grant_type=client_credentials&scope=testscope&client_id=myclient&client_secret=mypass",
+			shouldFail: false,
+		},
+		{
+			endpoint:   "/oauth2/token",
+			ct:         "application/x-www-form-urlencoded",
+			data:       "grant_type=client_credentials&scope=testscope&client_id=myclient&client_secret=mypass&request=1",
+			shouldFail: false,
+		},
+		{
+			endpoint:   "/oauth2/token",
+			ct:         "application/x-www-form-urlencoded",
+			data:       "invalid_field=invalid_value",
+			shouldFail: true,
+		},
+		{
+			endpoint:   "/oauth2/any-token",
+			ct:         "application/x-www-form-urlencoded",
+			data:       "grant_type=client_credentials&scope=testscope&client_id=myclient&client_secret=mypass",
+			shouldFail: false,
+		},
+		{
+			endpoint:   "/oauth2/any-token",
+			ct:         "application/x-www-form-urlencoded",
+			data:       "grant_type=refresh_token&client_id=myclient&refresh_token=someRefreshToken",
+			shouldFail: false,
+		},
+		{
+			endpoint:   "/oauth2/any-token",
+			ct:         "application/x-www-form-urlencoded",
+			data:       "grant_type=additional_grant&additional_info=extraInfo",
+			shouldFail: false,
+		},
+		{
+			endpoint:   "/oauth2/any-token",
+			ct:         "application/x-www-form-urlencoded",
+			data:       "grant_type=invalid_grant&extra_field=extraValue",
+			shouldFail: true,
+		},
+		{
+			endpoint:   "/oauth2/all-token",
+			ct:         "application/x-www-form-urlencoded",
+			data:       "grant_type=client_credentials&scope=testscope&client_id=myclient&client_secret=mypass&tracking_id=123456",
+			shouldFail: false,
+		},
+		{
+			endpoint:   "/oauth2/all-token",
+			ct:         "application/x-www-form-urlencoded",
+			data:       "grant_type=invalid&client_id=myclient&extra_field=extraValue",
+			shouldFail: true,
+		},
+	} {
+		t.Run(testcase.ct, func(t *testing.T) {
+			data := strings.NewReader(testcase.data)
+			req, err := http.NewRequest("POST", testcase.endpoint, data)
+			require.NoError(t, err)
+			req.Header.Add("Content-Type", testcase.ct)
+
+			route, pathParams, err := router.FindRoute(req)
+			require.NoError(t, err)
+
+			validationInput := &openapi3filter.RequestValidationInput{
+				Request:    req,
+				PathParams: pathParams,
+				Route:      route,
+			}
+
+			jsonParser := &fastjson.Parser{}
+			err = ValidateRequest(loader.Context, validationInput, jsonParser)
+			if testcase.shouldFail {
+				require.Error(t, err, "This test case should fail "+testcase.data)
+			} else {
+				require.NoError(t, err, "This test case should pass "+testcase.data)
+			}
+		})
+	}
+}
diff --git a/internal/platform/validator/issue639_test.go b/internal/platform/validator/issue639_test.go
index 5ec7cf00..8fb68861 100644
--- a/internal/platform/validator/issue639_test.go
+++ b/internal/platform/validator/issue639_test.go
@@ -54,7 +54,7 @@ func TestIssue639(t *testing.T) {
 	tests := []struct {
 		name               string
 		options            *openapi3filter.Options
-		expectedDefaultVal interface{}
+		expectedDefaultVal any
 	}{
 		{
 			name: "no defaults are added to requests",
@@ -95,7 +95,7 @@ func TestIssue639(t *testing.T) {
 			bodyAfterValidation, err := io.ReadAll(httpReq.Body)
 			require.NoError(t, err)
 
-			raw := map[string]interface{}{}
+			raw := map[string]any{}
 			err = json.Unmarshal(bodyAfterValidation, &raw)
 			require.NoError(t, err)
 			require.Equal(t, testcase.expectedDefaultVal,
diff --git a/internal/platform/validator/issue733_test.go b/internal/platform/validator/issue733_test.go
index e2a28d9e..7a5620ad 100644
--- a/internal/platform/validator/issue733_test.go
+++ b/internal/platform/validator/issue733_test.go
@@ -78,7 +78,7 @@ paths:
 
 			dec := json.NewDecoder(req.Body)
 			dec.UseNumber()
-			var jsonAfter map[string]interface{}
+			var jsonAfter map[string]any
 			err = dec.Decode(&jsonAfter)
 			require.NoError(t, err)
 
diff --git a/internal/platform/validator/issue991_test.go b/internal/platform/validator/issue991_test.go
new file mode 100644
index 00000000..941921da
--- /dev/null
+++ b/internal/platform/validator/issue991_test.go
@@ -0,0 +1,145 @@
+package validator
+
+import (
+	"context"
+	"net/http"
+	"testing"
+
+	"github.com/getkin/kin-openapi/openapi3filter"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+	"github.com/valyala/fastjson"
+)
+
+func generateSpec(explode bool) string {
+	explodeStr := "false"
+	if explode {
+		explodeStr = "true"
+	}
+	return `
+openapi: 3.0.0
+info:
+ title: 'Validator'
+ version: 0.0.1
+paths:
+ /category:
+   get:
+     parameters:
+       - $ref: "#/components/parameters/Type"
+     responses:
+       '200':
+         description: Ok
+components:
+ parameters:
+   Type:
+     in: query
+     name: type
+     required: false
+     explode: ` + explodeStr + `
+     description: Type parameter
+     schema:
+       type: array
+       default:
+         - A
+         - B
+         - C
+       items:
+         type: string
+         enum:
+           - A
+           - B
+           - C
+`
+}
+
+func TestValidateRequestDefault(t *testing.T) {
+	type args struct {
+		url      string
+		expected []string
+	}
+	tests := []struct {
+		name                 string
+		args                 args
+		expectedModification bool
+		expectedErr          error
+		spec                 string
+	}{
+		{
+			name: "Valid request without type parameters set and explode is false",
+			args: args{
+				url:      "/category",
+				expected: []string{"A,B,C"},
+			},
+			expectedModification: false,
+			expectedErr:          nil,
+			spec:                 generateSpec(false),
+		},
+		{
+			name: "Valid request with 1 type parameters set and explode is false",
+			args: args{
+				url:      "/category?type=A",
+				expected: []string{"A"},
+			},
+			expectedModification: false,
+			expectedErr:          nil,
+			spec:                 generateSpec(false),
+		},
+		{
+			name: "Valid request with 2 type parameters set and explode is false",
+			args: args{
+				url:      "/category?type=A&type=C",
+				expected: []string{"A", "C"},
+			},
+			expectedModification: false,
+			expectedErr:          nil,
+			spec:                 generateSpec(false),
+		},
+		{
+			name: "Valid request with 1 type parameters set out of enum and explode is false",
+			args: args{
+				url:      "/category?type=X",
+				expected: nil,
+			},
+			expectedModification: false,
+			expectedErr:          &openapi3filter.RequestError{},
+			spec:                 generateSpec(false),
+		},
+		{
+			name: "Valid request without type parameters set and explode is true",
+			args: args{
+				url:      "/category",
+				expected: []string{"A", "B", "C"},
+			},
+			expectedModification: false,
+			expectedErr:          nil,
+			spec:                 generateSpec(true),
+		},
+	}
+	for _, tc := range tests {
+		t.Run(tc.name, func(t *testing.T) {
+
+			req, err := http.NewRequest(http.MethodGet, tc.args.url, nil)
+			require.NoError(t, err)
+
+			router := setupTestRouter(t, tc.spec)
+			route, pathParams, err := router.FindRoute(req)
+			require.NoError(t, err)
+
+			validationInput := &openapi3filter.RequestValidationInput{
+				Request:    req,
+				PathParams: pathParams,
+				Route:      route,
+			}
+
+			jsonParser := &fastjson.Parser{}
+
+			err = ValidateRequest(context.Background(), validationInput, jsonParser)
+			assert.IsType(t, tc.expectedErr, err, "ValidateRequest(): error = %v, expectedError %v", err, tc.expectedErr)
+			if tc.expectedErr != nil {
+				return
+			}
+
+			assert.Equal(t, tc.args.expected, req.URL.Query()["type"], "ValidateRequest(): query parameter type values do not match expected")
+		})
+	}
+}
diff --git a/internal/platform/validator/req_resp_decoder.go b/internal/platform/validator/req_resp_decoder.go
index ba956c1e..0b39d5d5 100644
--- a/internal/platform/validator/req_resp_decoder.go
+++ b/internal/platform/validator/req_resp_decoder.go
@@ -43,13 +43,13 @@ const (
 // ParseError describes errors which happens while parse operation's parameters, requestBody, or response.
 type ParseError struct {
 	Kind         ParseErrorKind
-	Value        interface{}
+	Value        any
 	Reason       string
 	ExpectedType string
 	ValueStr     string
 	Cause        error
 
-	path []interface{}
+	path []any
 }
 
 var _ interface{ Unwrap() error } = ParseError{}
@@ -98,8 +98,8 @@ func (e ParseError) Unwrap() error {
 }
 
 // Path returns a path to the root cause.
-func (e *ParseError) Path() []interface{} {
-	var path []interface{}
+func (e *ParseError) Path() []any {
+	var path []any
 	if v, ok := e.Cause.(*ParseError); ok {
 		p := v.Path()
 		if len(p) > 0 {
@@ -119,7 +119,7 @@ func invalidSerializationMethodErr(sm *openapi3.SerializationMethod) error {
 // Decodes a parameter defined via the content property as an object. It uses
 // the user specified decoder, or our build-in decoder for application/json
 func decodeContentParameter(param *openapi3.Parameter, input *openapi3filter.RequestValidationInput) (
-	value interface{}, schema *openapi3.Schema, found bool, err error) {
+	value any, schema *openapi3.Schema, found bool, err error) {
 
 	var paramValues []string
 	switch param.In {
@@ -167,7 +167,7 @@ func decodeContentParameter(param *openapi3.Parameter, input *openapi3filter.Req
 }
 
 func defaultContentParameterDecoder(param *openapi3.Parameter, values []string) (
-	outValue interface{}, outSchema *openapi3.Schema, err error) {
+	outValue any, outSchema *openapi3.Schema, err error) {
 	// Only query parameters can have multiple values.
 	if len(values) > 1 && param.In != openapi3.ParameterInQuery {
 		err = fmt.Errorf("%s parameter %q cannot have multiple values", param.In, param.Name)
@@ -193,7 +193,7 @@ func defaultContentParameterDecoder(param *openapi3.Parameter, values []string)
 	}
 	outSchema = mt.Schema.Value
 
-	unmarshal := func(encoded string, paramSchema *openapi3.SchemaRef) (decoded interface{}, err error) {
+	unmarshal := func(encoded string, paramSchema *openapi3.SchemaRef) (decoded any, err error) {
 		if err = json.Unmarshal([]byte(encoded), &decoded); err != nil {
 			if paramSchema != nil && !paramSchema.Value.Type.Is("object") {
 				decoded, err = encoded, nil
@@ -208,9 +208,9 @@ func defaultContentParameterDecoder(param *openapi3.Parameter, values []string)
 			return
 		}
 	} else {
-		outArray := make([]interface{}, 0, len(values))
+		outArray := make([]any, 0, len(values))
 		for _, v := range values {
-			var item interface{}
+			var item any
 			if item, err = unmarshal(v, outSchema.Items); err != nil {
 				err = fmt.Errorf("error unmarshaling parameter %q", param.Name)
 				return
@@ -223,15 +223,15 @@ func defaultContentParameterDecoder(param *openapi3.Parameter, values []string)
 }
 
 type valueDecoder interface {
-	DecodePrimitive(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (interface{}, bool, error)
-	DecodeArray(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) ([]interface{}, bool, error)
-	DecodeObject(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (map[string]interface{}, bool, error)
+	DecodePrimitive(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (any, bool, error)
+	DecodeArray(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) ([]any, bool, error)
+	DecodeObject(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (map[string]any, bool, error)
 }
 
 // decodeStyledParameter returns a value of an operation's parameter from HTTP request for
 // parameters defined using the style format, and whether the parameter is supplied in the input.
 // The function returns ParseError when HTTP request contains an invalid value of a parameter.
-func decodeStyledParameter(param *openapi3.Parameter, input *openapi3filter.RequestValidationInput) (interface{}, bool, error) {
+func decodeStyledParameter(param *openapi3.Parameter, input *openapi3filter.RequestValidationInput) (any, bool, error) {
 	sm, err := param.SerializationMethod()
 	if err != nil {
 		return nil, false, err
@@ -261,11 +261,11 @@ func decodeStyledParameter(param *openapi3.Parameter, input *openapi3filter.Requ
 	return decodeValue(dec, param.Name, sm, param.Schema, param.Required)
 }
 
-func decodeValue(dec valueDecoder, param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef, required bool) (interface{}, bool, error) {
+func decodeValue(dec valueDecoder, param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef, required bool) (any, bool, error) {
 	var found bool
 
 	if len(schema.Value.AllOf) > 0 {
-		var value interface{}
+		var value any
 		var err error
 		for _, sr := range schema.Value.AllOf {
 			var f bool
@@ -294,7 +294,7 @@ func decodeValue(dec valueDecoder, param string, sm *openapi3.SerializationMetho
 
 	if len(schema.Value.OneOf) > 0 {
 		isMatched := 0
-		var value interface{}
+		var value any
 		for _, sr := range schema.Value.OneOf {
 			v, f, _ := decodeValue(dec, param, sm, sr, required)
 			found = found || f
@@ -318,14 +318,18 @@ func decodeValue(dec valueDecoder, param string, sm *openapi3.SerializationMetho
 	}
 
 	if schema.Value.Type != nil {
-		var decodeFn func(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (interface{}, bool, error)
+		var decodeFn func(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (any, bool, error)
 		switch {
 		case schema.Value.Type.Is("array"):
-			decodeFn = func(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (interface{}, bool, error) {
-				return dec.DecodeArray(param, sm, schema)
+			decodeFn = func(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (any, bool, error) {
+				res, b, e := dec.DecodeArray(param, sm, schema)
+				if len(res) == 0 {
+					return nil, b, e
+				}
+				return res, b, e
 			}
 		case schema.Value.Type.Is("object"):
-			decodeFn = func(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (interface{}, bool, error) {
+			decodeFn = func(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (any, bool, error) {
 				return dec.DecodeObject(param, sm, schema)
 			}
 		default:
@@ -357,7 +361,7 @@ type pathParamDecoder struct {
 	pathParams map[string]string
 }
 
-func (d *pathParamDecoder) DecodePrimitive(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (interface{}, bool, error) {
+func (d *pathParamDecoder) DecodePrimitive(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (any, bool, error) {
 	var prefix string
 	switch sm.Style {
 	case "simple":
@@ -387,7 +391,7 @@ func (d *pathParamDecoder) DecodePrimitive(param string, sm *openapi3.Serializat
 	return val, ok, err
 }
 
-func (d *pathParamDecoder) DecodeArray(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) ([]interface{}, bool, error) {
+func (d *pathParamDecoder) DecodeArray(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) ([]any, bool, error) {
 	var prefix, delim string
 	switch {
 	case sm.Style == "simple":
@@ -425,7 +429,7 @@ func (d *pathParamDecoder) DecodeArray(param string, sm *openapi3.SerializationM
 	return val, ok, err
 }
 
-func (d *pathParamDecoder) DecodeObject(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (map[string]interface{}, bool, error) {
+func (d *pathParamDecoder) DecodeObject(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (map[string]any, bool, error) {
 	var prefix, propsDelim, valueDelim string
 	switch {
 	case sm.Style == "simple" && !sm.Explode:
@@ -496,7 +500,7 @@ type urlValuesDecoder struct {
 	values url.Values
 }
 
-func (d *urlValuesDecoder) DecodePrimitive(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (interface{}, bool, error) {
+func (d *urlValuesDecoder) DecodePrimitive(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (any, bool, error) {
 	if sm.Style != "form" {
 		return nil, false, invalidSerializationMethodErr(sm)
 	}
@@ -514,7 +518,7 @@ func (d *urlValuesDecoder) DecodePrimitive(param string, sm *openapi3.Serializat
 	return val, ok, err
 }
 
-func (d *urlValuesDecoder) DecodeArray(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) ([]interface{}, bool, error) {
+func (d *urlValuesDecoder) DecodeArray(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) ([]any, bool, error) {
 	if sm.Style == "deepObject" {
 		return nil, false, invalidSerializationMethodErr(sm)
 	}
@@ -543,14 +547,14 @@ func (d *urlValuesDecoder) DecodeArray(param string, sm *openapi3.SerializationM
 // parseArray returns an array that contains items from a raw array.
 // Every item is parsed as a primitive value.
 // The function returns an error when an error happened while parse array's items.
-func (d *urlValuesDecoder) parseArray(raw []string, sm *openapi3.SerializationMethod, schemaRef *openapi3.SchemaRef) ([]interface{}, error) {
-	var value []interface{}
+func (d *urlValuesDecoder) parseArray(raw []string, sm *openapi3.SerializationMethod, schemaRef *openapi3.SchemaRef) ([]any, error) {
+	var value []any
 
 	for i, v := range raw {
 		item, err := d.parseValue(v, schemaRef.Value.Items)
 		if err != nil {
 			if v, ok := err.(*ParseError); ok {
-				return nil, &ParseError{path: []interface{}{i}, Cause: v}
+				return nil, &ParseError{path: []any{i}, Cause: v}
 			}
 			return nil, fmt.Errorf("item %d: %w", i, err)
 		}
@@ -565,9 +569,9 @@ func (d *urlValuesDecoder) parseArray(raw []string, sm *openapi3.SerializationMe
 	return value, nil
 }
 
-func (d *urlValuesDecoder) parseValue(v string, schema *openapi3.SchemaRef) (interface{}, error) {
+func (d *urlValuesDecoder) parseValue(v string, schema *openapi3.SchemaRef) (any, error) {
 	if len(schema.Value.AllOf) > 0 {
-		var value interface{}
+		var value any
 		var err error
 		for _, sr := range schema.Value.AllOf {
 			value, err = d.parseValue(v, sr)
@@ -579,7 +583,7 @@ func (d *urlValuesDecoder) parseValue(v string, schema *openapi3.SchemaRef) (int
 	}
 
 	if len(schema.Value.AnyOf) > 0 {
-		var value interface{}
+		var value any
 		var err error
 		for _, sr := range schema.Value.AnyOf {
 			if value, err = d.parseValue(v, sr); err == nil {
@@ -592,7 +596,7 @@ func (d *urlValuesDecoder) parseValue(v string, schema *openapi3.SchemaRef) (int
 
 	if len(schema.Value.OneOf) > 0 {
 		isMatched := 0
-		var value interface{}
+		var value any
 		var err error
 		for _, sr := range schema.Value.OneOf {
 			result, err := d.parseValue(v, sr)
@@ -625,7 +629,7 @@ const (
 	urlDecoderDelimiter = "\x1F" // should not conflict with URL characters
 )
 
-func (d *urlValuesDecoder) DecodeObject(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (map[string]interface{}, bool, error) {
+func (d *urlValuesDecoder) DecodeObject(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (map[string]any, bool, error) {
 	var propsFn func(url.Values) (map[string]string, error)
 	switch sm.Style {
 	case "form":
@@ -652,6 +656,10 @@ func (d *urlValuesDecoder) DecodeObject(param string, sm *openapi3.Serialization
 		propsFn = func(params url.Values) (map[string]string, error) {
 			props := make(map[string]string)
 			for key, values := range params {
+				if !regexp.MustCompile(fmt.Sprintf(`^%s\[`, regexp.QuoteMeta(param))).MatchString(key) {
+					continue
+				}
+
 				matches := regexp.MustCompile(`\[(.*?)\]`).FindAllStringSubmatch(key, -1)
 				switch l := len(matches); {
 				case l == 0:
@@ -715,7 +723,7 @@ type headerParamDecoder struct {
 	header http.Header
 }
 
-func (d *headerParamDecoder) DecodePrimitive(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (interface{}, bool, error) {
+func (d *headerParamDecoder) DecodePrimitive(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (any, bool, error) {
 	if sm.Style != "simple" {
 		return nil, false, invalidSerializationMethodErr(sm)
 	}
@@ -730,7 +738,7 @@ func (d *headerParamDecoder) DecodePrimitive(param string, sm *openapi3.Serializ
 	return val, ok, err
 }
 
-func (d *headerParamDecoder) DecodeArray(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) ([]interface{}, bool, error) {
+func (d *headerParamDecoder) DecodeArray(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) ([]any, bool, error) {
 	if sm.Style != "simple" {
 		return nil, false, invalidSerializationMethodErr(sm)
 	}
@@ -745,7 +753,7 @@ func (d *headerParamDecoder) DecodeArray(param string, sm *openapi3.Serializatio
 	return val, ok, err
 }
 
-func (d *headerParamDecoder) DecodeObject(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (map[string]interface{}, bool, error) {
+func (d *headerParamDecoder) DecodeObject(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (map[string]any, bool, error) {
 	if sm.Style != "simple" {
 		return nil, false, invalidSerializationMethodErr(sm)
 	}
@@ -772,7 +780,7 @@ type cookieParamDecoder struct {
 	req *http.Request
 }
 
-func (d *cookieParamDecoder) DecodePrimitive(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (interface{}, bool, error) {
+func (d *cookieParamDecoder) DecodePrimitive(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (any, bool, error) {
 	if sm.Style != "form" {
 		return nil, false, invalidSerializationMethodErr(sm)
 	}
@@ -791,7 +799,7 @@ func (d *cookieParamDecoder) DecodePrimitive(param string, sm *openapi3.Serializ
 	return val, found, err
 }
 
-func (d *cookieParamDecoder) DecodeArray(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) ([]interface{}, bool, error) {
+func (d *cookieParamDecoder) DecodeArray(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) ([]any, bool, error) {
 	if sm.Style != "form" || sm.Explode {
 		return nil, false, invalidSerializationMethodErr(sm)
 	}
@@ -809,7 +817,7 @@ func (d *cookieParamDecoder) DecodeArray(param string, sm *openapi3.Serializatio
 	return val, found, err
 }
 
-func (d *cookieParamDecoder) DecodeObject(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (map[string]interface{}, bool, error) {
+func (d *cookieParamDecoder) DecodeObject(param string, sm *openapi3.SerializationMethod, schema *openapi3.SchemaRef) (map[string]any, bool, error) {
 	if sm.Style != "form" || sm.Explode {
 		return nil, false, invalidSerializationMethodErr(sm)
 	}
@@ -872,33 +880,33 @@ func propsFromString(src, propDelim, valueDelim string) (map[string]string, erro
 	return props, nil
 }
 
-func deepGet(m map[string]interface{}, keys ...string) (interface{}, bool) {
+func deepGet(m map[string]any, keys ...string) (any, bool) {
 	for _, key := range keys {
 		val, ok := m[key]
 		if !ok {
 			return nil, false
 		}
-		if m, ok = val.(map[string]interface{}); !ok {
+		if m, ok = val.(map[string]any); !ok {
 			return val, true
 		}
 	}
 	return m, true
 }
 
-func deepSet(m map[string]interface{}, keys []string, value interface{}) {
+func deepSet(m map[string]any, keys []string, value any) {
 	for i := 0; i < len(keys)-1; i++ {
 		key := keys[i]
 		if _, ok := m[key]; !ok {
-			m[key] = make(map[string]interface{})
+			m[key] = make(map[string]any)
 		}
-		m = m[key].(map[string]interface{})
+		m = m[key].(map[string]any)
 	}
 	m[keys[len(keys)-1]] = value
 }
 
 // makeObject returns an object that contains properties from props.
-func makeObject(props map[string]string, schema *openapi3.SchemaRef) (map[string]interface{}, error) {
-	mobj := make(map[string]interface{})
+func makeObject(props map[string]string, schema *openapi3.SchemaRef) (map[string]any, error) {
+	mobj := make(map[string]any)
 
 	for kk, value := range props {
 		keys := strings.Split(kk, urlDecoderDelimiter)
@@ -913,7 +921,7 @@ func makeObject(props map[string]string, schema *openapi3.SchemaRef) (map[string
 	if err != nil {
 		return nil, err
 	}
-	result, ok := r.(map[string]interface{})
+	result, ok := r.(map[string]any)
 	if !ok {
 		return nil, &ParseError{Kind: KindOther, Reason: "invalid param object", Value: result}
 	}
@@ -922,8 +930,8 @@ func makeObject(props map[string]string, schema *openapi3.SchemaRef) (map[string
 }
 
 // example: map[0:map[key:true] 1:map[key:false]] -> [map[key:true] map[key:false]]
-func sliceMapToSlice(m map[string]interface{}) ([]interface{}, error) {
-	var result []interface{}
+func sliceMapToSlice(m map[string]any) ([]any, error) {
+	var result []any
 
 	keys := make([]int, 0, len(m))
 	for k := range m {
@@ -951,7 +959,7 @@ func sliceMapToSlice(m map[string]interface{}) ([]interface{}, error) {
 }
 
 // buildResObj constructs an object based on a given schema and param values
-func buildResObj(params map[string]interface{}, parentKeys []string, key string, schema *openapi3.SchemaRef) (interface{}, error) {
+func buildResObj(params map[string]any, parentKeys []string, key string, schema *openapi3.SchemaRef) (any, error) {
 	mapKeys := parentKeys
 	if key != "" {
 		mapKeys = append(mapKeys, key)
@@ -963,7 +971,7 @@ func buildResObj(params map[string]interface{}, parentKeys []string, key string,
 		if !ok {
 			return nil, nil
 		}
-		t, isMap := paramArr.(map[string]interface{})
+		t, isMap := paramArr.(map[string]any)
 		if !isMap {
 			return nil, &ParseError{path: pathFromKeys(mapKeys), Kind: KindInvalidFormat, Reason: "array items must be set with indexes"}
 		}
@@ -972,7 +980,7 @@ func buildResObj(params map[string]interface{}, parentKeys []string, key string,
 		if err != nil {
 			return nil, &ParseError{path: pathFromKeys(mapKeys), Kind: KindInvalidFormat, Reason: fmt.Sprintf("could not convert value map to array: %v", err)}
 		}
-		resultArr := make([]interface{} /*not 0,*/, len(arr))
+		resultArr := make([]any /*not 0,*/, len(arr))
 		for i := range arr {
 			r, err := buildResObj(params, mapKeys, strconv.Itoa(i), schema.Value.Items)
 			if err != nil {
@@ -984,10 +992,10 @@ func buildResObj(params map[string]interface{}, parentKeys []string, key string,
 		}
 		return resultArr, nil
 	case schema.Value.Type.Is("object"):
-		resultMap := make(map[string]interface{})
+		resultMap := make(map[string]any)
 		additPropsSchema := schema.Value.AdditionalProperties.Schema
 		pp, _ := deepGet(params, mapKeys...)
-		objectParams, ok := pp.(map[string]interface{})
+		objectParams, ok := pp.(map[string]any)
 		if !ok {
 			// not the expected type, but return it either way and leave validation up to ValidateParameter
 			return pp, nil
@@ -1041,20 +1049,20 @@ func buildResObj(params map[string]interface{}, parentKeys []string, key string,
 }
 
 // buildFromSchemas decodes params with anyOf, oneOf, allOf schemas.
-func buildFromSchemas(schemas openapi3.SchemaRefs, params map[string]interface{}, mapKeys []string, key string) (interface{}, error) {
-	resultMap := make(map[string]interface{})
+func buildFromSchemas(schemas openapi3.SchemaRefs, params map[string]any, mapKeys []string, key string) (any, error) {
+	resultMap := make(map[string]any)
 	for _, s := range schemas {
 		val, err := buildResObj(params, mapKeys, key, s)
 		if err == nil && val != nil {
 
-			if m, ok := val.(map[string]interface{}); ok {
+			if m, ok := val.(map[string]any); ok {
 				for k, v := range m {
 					resultMap[k] = v
 				}
 				continue
 			}
 
-			if a, ok := val.([]interface{}); ok {
+			if a, ok := val.([]any); ok {
 				if len(a) > 0 {
 					return a, nil
 				}
@@ -1080,8 +1088,8 @@ func handlePropParseError(path []string, err error) error {
 	return fmt.Errorf("property %q: %w", strings.Join(path, "."), err)
 }
 
-func pathFromKeys(kk []string) []interface{} {
-	path := make([]interface{}, 0, len(kk))
+func pathFromKeys(kk []string) []any {
+	path := make([]any, 0, len(kk))
 	for _, v := range kk {
 		path = append(path, v)
 	}
@@ -1091,13 +1099,13 @@ func pathFromKeys(kk []string) []interface{} {
 // parseArray returns an array that contains items from a raw array.
 // Every item is parsed as a primitive value.
 // The function returns an error when an error happened while parse array's items.
-func parseArray(raw []string, schemaRef *openapi3.SchemaRef) ([]interface{}, error) {
-	var value []interface{}
+func parseArray(raw []string, schemaRef *openapi3.SchemaRef) ([]any, error) {
+	var value []any
 	for i, v := range raw {
 		item, err := parsePrimitive(v, schemaRef.Value.Items)
 		if err != nil {
 			if v, ok := err.(*ParseError); ok {
-				return nil, &ParseError{path: []interface{}{i}, Cause: v}
+				return nil, &ParseError{path: []any{i}, Cause: v}
 			}
 			return nil, fmt.Errorf("item %d: %w", i, err)
 		}
@@ -1115,7 +1123,7 @@ func parseArray(raw []string, schemaRef *openapi3.SchemaRef) ([]interface{}, err
 // parsePrimitive returns a value that is created by parsing a source string to a primitive type
 // that is specified by a schema. The function returns nil when the source string is empty.
 // The function panics when a schema has a non-primitive type.
-func parsePrimitive(raw string, schema *openapi3.SchemaRef) (v interface{}, err error) {
+func parsePrimitive(raw string, schema *openapi3.SchemaRef) (v any, err error) {
 	if raw == "" {
 		return nil, nil
 	}
@@ -1127,7 +1135,7 @@ func parsePrimitive(raw string, schema *openapi3.SchemaRef) (v interface{}, err
 	return
 }
 
-func parsePrimitiveCase(raw string, schema *openapi3.SchemaRef, typ string) (interface{}, error) {
+func parsePrimitiveCase(raw string, schema *openapi3.SchemaRef, typ string) (any, error) {
 	switch typ {
 	case "integer":
 		if schema.Value.Format == "int32" {
@@ -1165,8 +1173,8 @@ func parsePrimitiveCase(raw string, schema *openapi3.SchemaRef, typ string) (int
 type EncodingFn func(partName string) *openapi3.Encoding
 
 // BodyDecoder is an interface to decode a body of a request or response.
-// An implementation must return a value that is a primitive, []interface{}, or map[string]interface{}.
-type BodyDecoder func(io.Reader, http.Header, *openapi3.SchemaRef, EncodingFn, *fastjson.Parser) (interface{}, error)
+// An implementation must return a value that is a primitive, []any, or map[string]any.
+type BodyDecoder func(io.Reader, http.Header, *openapi3.SchemaRef, EncodingFn, *fastjson.Parser) (any, error)
 
 // bodyDecoders contains decoders for supported content types of a body.
 // By default, there is content type "application/json" is supported only.
@@ -1249,7 +1257,7 @@ func getBodyDecoder(mediaType, suffix string) (BodyDecoder, error) {
 // The function returns ParseError when a body is invalid.
 func decodeBody(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (
 	string,
-	interface{},
+	any,
 	error,
 ) {
 	contentType := header.Get(headerCT)
@@ -1299,7 +1307,7 @@ func init() {
 	RegisterBodyDecoder("text/plain", plainBodyDecoder)
 }
 
-func plainBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (interface{}, error) {
+func plainBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (any, error) {
 	data, err := io.ReadAll(body)
 	if err != nil {
 		return nil, &ParseError{Kind: KindInvalidFormat, Cause: err}
@@ -1307,7 +1315,7 @@ func plainBodyDecoder(body io.Reader, header http.Header, schema *openapi3.Schem
 	return string(data), nil
 }
 
-func multipartPartBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (interface{}, error) {
+func multipartPartBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (any, error) {
 	data, err := io.ReadAll(body)
 	if err != nil {
 		return nil, &ParseError{Kind: KindInvalidFormat, Cause: err}
@@ -1333,7 +1341,7 @@ func multipartPartBodyDecoder(body io.Reader, header http.Header, schema *openap
 	return dataStr, nil
 }
 
-func jsonBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (interface{}, error) {
+func jsonBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (any, error) {
 	var data []byte
 	var err error
 
@@ -1350,7 +1358,7 @@ func jsonBodyDecoder(body io.Reader, header http.Header, schema *openapi3.Schema
 	return convertToMap(parsedDoc), nil
 }
 
-func xmlBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (interface{}, error) {
+func xmlBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (any, error) {
 	var data []byte
 	var err error
 
@@ -1367,15 +1375,15 @@ func xmlBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaR
 	return mv.Old(), nil
 }
 
-func yamlBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (interface{}, error) {
-	var value interface{}
+func yamlBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (any, error) {
+	var value any
 	if err := yaml.NewDecoder(body).Decode(&value); err != nil {
 		return nil, &ParseError{Kind: KindInvalidFormat, Cause: err}
 	}
 	return value, nil
 }
 
-func urlencodedBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (interface{}, error) {
+func urlencodedBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (any, error) {
 
 	// Validate schema of request body.
 	// By the OpenAPI 3 specification request body's schema must have type "object".
@@ -1407,7 +1415,7 @@ func urlencodedBodyDecoder(body io.Reader, header http.Header, schema *openapi3.
 	}
 
 	// Make an object value from form values.
-	obj := make(map[string]interface{})
+	obj := make(map[string]any)
 	dec := &urlValuesDecoder{values: values}
 	// Decode schema constructs (allOf, anyOf, oneOf)
 	if err := decodeSchemaConstructs(dec, schema.Value.AllOf, obj, encFn); err != nil {
@@ -1430,8 +1438,20 @@ func urlencodedBodyDecoder(body io.Reader, header http.Header, schema *openapi3.
 
 // decodeSchemaConstructs tries to decode properties based on provided schemas.
 // This function is for decoding purposes only and not for validation.
-func decodeSchemaConstructs(dec *urlValuesDecoder, schemas []*openapi3.SchemaRef, obj map[string]interface{}, encFn EncodingFn) error {
+func decodeSchemaConstructs(dec *urlValuesDecoder, schemas []*openapi3.SchemaRef, obj map[string]any, encFn EncodingFn) error {
 	for _, schemaRef := range schemas {
+
+		// Decode schema constructs (allOf, anyOf, oneOf)
+		if err := decodeSchemaConstructs(dec, schemaRef.Value.AllOf, obj, encFn); err != nil {
+			return err
+		}
+		if err := decodeSchemaConstructs(dec, schemaRef.Value.AnyOf, obj, encFn); err != nil {
+			return err
+		}
+		if err := decodeSchemaConstructs(dec, schemaRef.Value.OneOf, obj, encFn); err != nil {
+			return err
+		}
+
 		for name, prop := range schemaRef.Value.Properties {
 			value, _, err := decodeProperty(dec, name, prop, encFn)
 			if err != nil {
@@ -1447,11 +1467,11 @@ func decodeSchemaConstructs(dec *urlValuesDecoder, schemas []*openapi3.SchemaRef
 	return nil
 }
 
-func isEqual(value1, value2 interface{}) bool {
+func isEqual(value1, value2 any) bool {
 	return reflect.DeepEqual(value1, value2)
 }
 
-func decodeProperty(dec valueDecoder, name string, prop *openapi3.SchemaRef, encFn EncodingFn) (interface{}, bool, error) {
+func decodeProperty(dec valueDecoder, name string, prop *openapi3.SchemaRef, encFn EncodingFn) (any, bool, error) {
 	var enc *openapi3.Encoding
 	if encFn != nil {
 		enc = encFn(name)
@@ -1460,13 +1480,13 @@ func decodeProperty(dec valueDecoder, name string, prop *openapi3.SchemaRef, enc
 	return decodeValue(dec, name, sm, prop, false)
 }
 
-func multipartBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (interface{}, error) {
+func multipartBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (any, error) {
 	if !schema.Value.Type.Is("object") {
 		return nil, errors.New("unsupported schema of request body")
 	}
 
 	// Parse form.
-	values := make(map[string][]interface{})
+	values := make(map[string][]any)
 	contentType := header.Get(headerCT)
 	_, params, err := mime.ParseMediaType(contentType)
 	if err != nil {
@@ -1529,10 +1549,10 @@ func multipartBodyDecoder(body io.Reader, header http.Header, schema *openapi3.S
 			}
 		}
 
-		var value interface{}
+		var value any
 		if _, value, err = decodeBody(part, http.Header(part.Header), valueSchema, subEncFn, jsonParser); err != nil {
 			if v, ok := err.(*ParseError); ok {
-				return nil, &ParseError{path: []interface{}{name}, Cause: v}
+				return nil, &ParseError{path: []any{name}, Cause: v}
 			}
 			return nil, fmt.Errorf("part %s: %w", name, err)
 		}
@@ -1563,7 +1583,7 @@ func multipartBodyDecoder(body io.Reader, header http.Header, schema *openapi3.S
 	}
 
 	// Make an object value from form values.
-	obj := make(map[string]interface{})
+	obj := make(map[string]any)
 	for name, prop := range allTheProperties {
 		vv := values[name]
 		if len(vv) == 0 {
@@ -1580,7 +1600,7 @@ func multipartBodyDecoder(body io.Reader, header http.Header, schema *openapi3.S
 }
 
 // FileBodyDecoder is a body decoder that decodes a file body to a string.
-func FileBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (interface{}, error) {
+func FileBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (any, error) {
 	data, err := io.ReadAll(body)
 	if err != nil {
 		return nil, err
@@ -1589,7 +1609,7 @@ func FileBodyDecoder(body io.Reader, header http.Header, schema *openapi3.Schema
 }
 
 // zipFileBodyDecoder is a body decoder that decodes a zip file body to a string.
-func zipFileBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (interface{}, error) {
+func zipFileBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (any, error) {
 	buff := bytes.NewBuffer([]byte{})
 	size, err := io.Copy(buff, body)
 	if err != nil {
@@ -1640,10 +1660,10 @@ func zipFileBodyDecoder(body io.Reader, header http.Header, schema *openapi3.Sch
 }
 
 // csvBodyDecoder is a body decoder that decodes a csv body to a string.
-func csvBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (interface{}, error) {
+func csvBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (any, error) {
 	r := csv.NewReader(body)
 
-	var content string
+	var sb strings.Builder
 	for {
 		record, err := r.Read()
 		if err == io.EOF {
@@ -1653,8 +1673,9 @@ func csvBodyDecoder(body io.Reader, header http.Header, schema *openapi3.SchemaR
 			return nil, err
 		}
 
-		content += strings.Join(record, ",") + "\n"
+		sb.WriteString(strings.Join(record, ","))
+		sb.WriteString("\n")
 	}
 
-	return content, nil
+	return sb.String(), nil
 }
diff --git a/internal/platform/validator/req_resp_decoder_test.go b/internal/platform/validator/req_resp_decoder_test.go
index 829ebbd2..afd5391f 100644
--- a/internal/platform/validator/req_resp_decoder_test.go
+++ b/internal/platform/validator/req_resp_decoder_test.go
@@ -5,7 +5,6 @@ import (
 	"context"
 	"encoding/json"
 	"fmt"
-	"github.com/stretchr/testify/assert"
 	"io"
 	"mime/multipart"
 	"net/http"
@@ -18,6 +17,7 @@ import (
 	"github.com/getkin/kin-openapi/openapi3"
 	"github.com/getkin/kin-openapi/openapi3filter"
 	legacyrouter "github.com/getkin/kin-openapi/routers/legacy"
+	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 	"github.com/valyala/fastjson"
 )
@@ -28,7 +28,7 @@ var (
 	arrayOf   = func(items *openapi3.SchemaRef) *openapi3.SchemaRef {
 		return &openapi3.SchemaRef{Value: &openapi3.Schema{Type: &openapi3.Types{"array"}, Items: items}}
 	}
-	objectOf = func(args ...interface{}) *openapi3.SchemaRef {
+	objectOf = func(args ...any) *openapi3.SchemaRef {
 		s := &openapi3.SchemaRef{Value: &openapi3.Schema{Type: &openapi3.Types{"object"}, Properties: make(map[string]*openapi3.SchemaRef)}}
 		if len(args)%2 != 0 {
 			panic("invalid arguments. must be an even number of arguments")
@@ -119,25 +119,25 @@ var (
 )
 
 func TestDeepGet(t *testing.T) {
-	iarray := map[string]interface{}{
-		"0": map[string]interface{}{
+	iarray := map[string]any{
+		"0": map[string]any{
 			"foo": 111,
 		},
-		"1": map[string]interface{}{
+		"1": map[string]any{
 			"bar": 222,
 		},
 	}
 
 	tests := []struct {
 		name       string
-		m          map[string]interface{}
+		m          map[string]any
 		keys       []string
-		expected   interface{}
+		expected   any
 		shouldFind bool
 	}{
 		{
 			name: "Simple map - key exists",
-			m: map[string]interface{}{
+			m: map[string]any{
 				"foo": "bar",
 			},
 			keys:       []string{"foo"},
@@ -146,8 +146,8 @@ func TestDeepGet(t *testing.T) {
 		},
 		{
 			name: "Nested map - key exists",
-			m: map[string]interface{}{
-				"foo": map[string]interface{}{
+			m: map[string]any{
+				"foo": map[string]any{
 					"bar": "baz",
 				},
 			},
@@ -157,8 +157,8 @@ func TestDeepGet(t *testing.T) {
 		},
 		{
 			name: "Nested map - key does not exist",
-			m: map[string]interface{}{
-				"foo": map[string]interface{}{
+			m: map[string]any{
+				"foo": map[string]any{
 					"bar": "baz",
 				},
 			},
@@ -168,8 +168,8 @@ func TestDeepGet(t *testing.T) {
 		},
 		{
 			name: "Array - element exists",
-			m: map[string]interface{}{
-				"array": map[string]interface{}{"0": "a", "1": "b", "2": "c"},
+			m: map[string]any{
+				"array": map[string]any{"0": "a", "1": "b", "2": "c"},
 			},
 			keys:       []string{"array", "1"},
 			expected:   "b",
@@ -177,8 +177,8 @@ func TestDeepGet(t *testing.T) {
 		},
 		{
 			name: "Array - element does not exist - invalid index",
-			m: map[string]interface{}{
-				"array": map[string]interface{}{"0": "a", "1": "b", "2": "c"},
+			m: map[string]any{
+				"array": map[string]any{"0": "a", "1": "b", "2": "c"},
 			},
 			keys:       []string{"array", "3"},
 			expected:   nil,
@@ -186,8 +186,8 @@ func TestDeepGet(t *testing.T) {
 		},
 		{
 			name: "Array - element does not exist - invalid keys",
-			m: map[string]interface{}{
-				"array": map[string]interface{}{"0": "a", "1": "b", "2": "c"},
+			m: map[string]any{
+				"array": map[string]any{"0": "a", "1": "b", "2": "c"},
 			},
 			keys:       []string{"array", "a", "999"},
 			expected:   nil,
@@ -195,7 +195,7 @@ func TestDeepGet(t *testing.T) {
 		},
 		{
 			name: "Array of objects - element exists 1",
-			m: map[string]interface{}{
+			m: map[string]any{
 				"array": iarray,
 			},
 			keys:       []string{"array", "1", "bar"},
@@ -204,18 +204,18 @@ func TestDeepGet(t *testing.T) {
 		},
 		{
 			name: "Array of objects - element exists 2",
-			m: map[string]interface{}{
+			m: map[string]any{
 				"array": iarray,
 			},
 			keys: []string{"array", "0"},
-			expected: map[string]interface{}{
+			expected: map[string]any{
 				"foo": 111,
 			},
 			shouldFind: true,
 		},
 		{
 			name: "Array of objects - element exists 3",
-			m: map[string]interface{}{
+			m: map[string]any{
 				"array": iarray,
 			},
 			keys:       []string{"array"},
@@ -238,26 +238,26 @@ func TestDeepGet(t *testing.T) {
 func TestDeepSet(t *testing.T) {
 	tests := []struct {
 		name     string
-		inputMap map[string]interface{}
+		inputMap map[string]any
 		keys     []string
-		value    interface{}
-		expected map[string]interface{}
+		value    any
+		expected map[string]any
 	}{
 		{
 			name:     "simple set",
-			inputMap: map[string]interface{}{},
+			inputMap: map[string]any{},
 			keys:     []string{"key"},
 			value:    "value",
-			expected: map[string]interface{}{"key": "value"},
+			expected: map[string]any{"key": "value"},
 		},
 		{
 			name:     "intermediate array of objects",
-			inputMap: map[string]interface{}{},
+			inputMap: map[string]any{},
 			keys:     []string{"nested", "0", "key"},
 			value:    true,
-			expected: map[string]interface{}{
-				"nested": map[string]interface{}{
-					"0": map[string]interface{}{
+			expected: map[string]any{
+				"nested": map[string]any{
+					"0": map[string]any{
 						"key": true,
 					},
 				},
@@ -265,12 +265,12 @@ func TestDeepSet(t *testing.T) {
 		},
 		{
 			name:     "existing nested array of objects",
-			inputMap: map[string]interface{}{"nested": map[string]interface{}{"0": map[string]interface{}{"existingKey": "existingValue"}}},
+			inputMap: map[string]any{"nested": map[string]any{"0": map[string]any{"existingKey": "existingValue"}}},
 			keys:     []string{"nested", "0", "newKey"},
 			value:    "newValue",
-			expected: map[string]interface{}{
-				"nested": map[string]interface{}{
-					"0": map[string]interface{}{
+			expected: map[string]any{
+				"nested": map[string]any{
+					"0": map[string]any{
 						"existingKey": "existingValue",
 						"newKey":      "newValue",
 					},
@@ -295,7 +295,7 @@ func TestDecodeParameter(t *testing.T) {
 		query  string
 		header string
 		cookie string
-		want   interface{}
+		want   any
 		found  bool
 		err    error
 	}
@@ -442,21 +442,21 @@ func TestDecodeParameter(t *testing.T) {
 					name:  "simple",
 					param: &openapi3.Parameter{Name: "param", In: "path", Style: "simple", Explode: noExplode, Schema: stringArraySchema},
 					path:  "/foo,bar",
-					want:  []interface{}{"foo", "bar"},
+					want:  []any{"foo", "bar"},
 					found: true,
 				},
 				{
 					name:  "simple explode",
 					param: &openapi3.Parameter{Name: "param", In: "path", Style: "simple", Explode: explode, Schema: stringArraySchema},
 					path:  "/foo,bar",
-					want:  []interface{}{"foo", "bar"},
+					want:  []any{"foo", "bar"},
 					found: true,
 				},
 				{
 					name:  "label",
 					param: &openapi3.Parameter{Name: "param", In: "path", Style: "label", Explode: noExplode, Schema: stringArraySchema},
 					path:  "/.foo,bar",
-					want:  []interface{}{"foo", "bar"},
+					want:  []any{"foo", "bar"},
 					found: true,
 				},
 				{
@@ -470,7 +470,7 @@ func TestDecodeParameter(t *testing.T) {
 					name:  "label explode",
 					param: &openapi3.Parameter{Name: "param", In: "path", Style: "label", Explode: explode, Schema: stringArraySchema},
 					path:  "/.foo.bar",
-					want:  []interface{}{"foo", "bar"},
+					want:  []any{"foo", "bar"},
 					found: true,
 				},
 				{
@@ -484,7 +484,7 @@ func TestDecodeParameter(t *testing.T) {
 					name:  "matrix",
 					param: &openapi3.Parameter{Name: "param", In: "path", Style: "matrix", Explode: noExplode, Schema: stringArraySchema},
 					path:  "/;param=foo,bar",
-					want:  []interface{}{"foo", "bar"},
+					want:  []any{"foo", "bar"},
 					found: true,
 				},
 				{
@@ -498,7 +498,7 @@ func TestDecodeParameter(t *testing.T) {
 					name:  "matrix explode",
 					param: &openapi3.Parameter{Name: "param", In: "path", Style: "matrix", Explode: explode, Schema: stringArraySchema},
 					path:  "/;param=foo;param=bar",
-					want:  []interface{}{"foo", "bar"},
+					want:  []any{"foo", "bar"},
 					found: true,
 				},
 				{
@@ -512,7 +512,7 @@ func TestDecodeParameter(t *testing.T) {
 					name:  "default",
 					param: &openapi3.Parameter{Name: "param", In: "path", Schema: stringArraySchema},
 					path:  "/foo,bar",
-					want:  []interface{}{"foo", "bar"},
+					want:  []any{"foo", "bar"},
 					found: true,
 				},
 				{
@@ -520,21 +520,21 @@ func TestDecodeParameter(t *testing.T) {
 					param: &openapi3.Parameter{Name: "param", In: "path", Schema: arrayOf(integerSchema)},
 					path:  "/1,foo",
 					found: true,
-					err:   &ParseError{path: []interface{}{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
+					err:   &ParseError{path: []any{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
 				},
 				{
 					name:  "invalid number items",
 					param: &openapi3.Parameter{Name: "param", In: "path", Schema: arrayOf(numberSchema)},
 					path:  "/1.1,foo",
 					found: true,
-					err:   &ParseError{path: []interface{}{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
+					err:   &ParseError{path: []any{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
 				},
 				{
 					name:  "invalid boolean items",
 					param: &openapi3.Parameter{Name: "param", In: "path", Schema: arrayOf(booleanSchema)},
 					path:  "/true,foo",
 					found: true,
-					err:   &ParseError{path: []interface{}{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
+					err:   &ParseError{path: []any{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
 				},
 			},
 		},
@@ -545,21 +545,21 @@ func TestDecodeParameter(t *testing.T) {
 					name:  "simple",
 					param: &openapi3.Parameter{Name: "param", In: "path", Style: "simple", Explode: noExplode, Schema: objectSchema},
 					path:  "/id,foo,name,bar",
-					want:  map[string]interface{}{"id": "foo", "name": "bar"},
+					want:  map[string]any{"id": "foo", "name": "bar"},
 					found: true,
 				},
 				{
 					name:  "simple explode",
 					param: &openapi3.Parameter{Name: "param", In: "path", Style: "simple", Explode: explode, Schema: objectSchema},
 					path:  "/id=foo,name=bar",
-					want:  map[string]interface{}{"id": "foo", "name": "bar"},
+					want:  map[string]any{"id": "foo", "name": "bar"},
 					found: true,
 				},
 				{
 					name:  "label",
 					param: &openapi3.Parameter{Name: "param", In: "path", Style: "label", Explode: noExplode, Schema: objectSchema},
 					path:  "/.id,foo,name,bar",
-					want:  map[string]interface{}{"id": "foo", "name": "bar"},
+					want:  map[string]any{"id": "foo", "name": "bar"},
 					found: true,
 				},
 				{
@@ -573,7 +573,7 @@ func TestDecodeParameter(t *testing.T) {
 					name:  "label explode",
 					param: &openapi3.Parameter{Name: "param", In: "path", Style: "label", Explode: explode, Schema: objectSchema},
 					path:  "/.id=foo.name=bar",
-					want:  map[string]interface{}{"id": "foo", "name": "bar"},
+					want:  map[string]any{"id": "foo", "name": "bar"},
 					found: true,
 				},
 				{
@@ -587,7 +587,7 @@ func TestDecodeParameter(t *testing.T) {
 					name:  "matrix",
 					param: &openapi3.Parameter{Name: "param", In: "path", Style: "matrix", Explode: noExplode, Schema: objectSchema},
 					path:  "/;param=id,foo,name,bar",
-					want:  map[string]interface{}{"id": "foo", "name": "bar"},
+					want:  map[string]any{"id": "foo", "name": "bar"},
 					found: true,
 				},
 				{
@@ -601,7 +601,7 @@ func TestDecodeParameter(t *testing.T) {
 					name:  "matrix explode",
 					param: &openapi3.Parameter{Name: "param", In: "path", Style: "matrix", Explode: explode, Schema: objectSchema},
 					path:  "/;id=foo;name=bar",
-					want:  map[string]interface{}{"id": "foo", "name": "bar"},
+					want:  map[string]any{"id": "foo", "name": "bar"},
 					found: true,
 				},
 				{
@@ -615,7 +615,7 @@ func TestDecodeParameter(t *testing.T) {
 					name:  "default",
 					param: &openapi3.Parameter{Name: "param", In: "path", Schema: objectSchema},
 					path:  "/id,foo,name,bar",
-					want:  map[string]interface{}{"id": "foo", "name": "bar"},
+					want:  map[string]any{"id": "foo", "name": "bar"},
 					found: true,
 				},
 				{
@@ -623,21 +623,21 @@ func TestDecodeParameter(t *testing.T) {
 					param: &openapi3.Parameter{Name: "param", In: "path", Schema: objectOf("foo", integerSchema)},
 					path:  "/foo,bar",
 					found: true,
-					err:   &ParseError{path: []interface{}{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
+					err:   &ParseError{path: []any{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
 				},
 				{
 					name:  "invalid number prop",
 					param: &openapi3.Parameter{Name: "param", In: "path", Schema: objectOf("foo", numberSchema)},
 					path:  "/foo,bar",
 					found: true,
-					err:   &ParseError{path: []interface{}{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
+					err:   &ParseError{path: []any{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
 				},
 				{
 					name:  "invalid boolean prop",
 					param: &openapi3.Parameter{Name: "param", In: "path", Schema: objectOf("foo", booleanSchema)},
 					path:  "/foo,bar",
 					found: true,
-					err:   &ParseError{path: []interface{}{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
+					err:   &ParseError{path: []any{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
 				},
 			},
 		},
@@ -787,49 +787,49 @@ func TestDecodeParameter(t *testing.T) {
 					name:  "form",
 					param: &openapi3.Parameter{Name: "param", In: "query", Style: "form", Explode: noExplode, Schema: stringArraySchema},
 					query: "param=foo,bar",
-					want:  []interface{}{"foo", "bar"},
+					want:  []any{"foo", "bar"},
 					found: true,
 				},
 				{
 					name:  "form explode",
 					param: &openapi3.Parameter{Name: "param", In: "query", Style: "form", Explode: explode, Schema: stringArraySchema},
 					query: "param=foo&param=bar",
-					want:  []interface{}{"foo", "bar"},
+					want:  []any{"foo", "bar"},
 					found: true,
 				},
 				{
 					name:  "spaceDelimited",
 					param: &openapi3.Parameter{Name: "param", In: "query", Style: "spaceDelimited", Explode: noExplode, Schema: stringArraySchema},
 					query: "param=foo bar",
-					want:  []interface{}{"foo", "bar"},
+					want:  []any{"foo", "bar"},
 					found: true,
 				},
 				{
 					name:  "spaceDelimited explode",
 					param: &openapi3.Parameter{Name: "param", In: "query", Style: "spaceDelimited", Explode: explode, Schema: stringArraySchema},
 					query: "param=foo&param=bar",
-					want:  []interface{}{"foo", "bar"},
+					want:  []any{"foo", "bar"},
 					found: true,
 				},
 				{
 					name:  "pipeDelimited",
 					param: &openapi3.Parameter{Name: "param", In: "query", Style: "pipeDelimited", Explode: noExplode, Schema: stringArraySchema},
 					query: "param=foo|bar",
-					want:  []interface{}{"foo", "bar"},
+					want:  []any{"foo", "bar"},
 					found: true,
 				},
 				{
 					name:  "pipeDelimited explode",
 					param: &openapi3.Parameter{Name: "param", In: "query", Style: "pipeDelimited", Explode: explode, Schema: stringArraySchema},
 					query: "param=foo&param=bar",
-					want:  []interface{}{"foo", "bar"},
+					want:  []any{"foo", "bar"},
 					found: true,
 				},
 				{
 					name:  "default",
 					param: &openapi3.Parameter{Name: "param", In: "query", Schema: stringArraySchema},
 					query: "param=foo&param=bar",
-					want:  []interface{}{"foo", "bar"},
+					want:  []any{"foo", "bar"},
 					found: true,
 				},
 				{
@@ -837,21 +837,21 @@ func TestDecodeParameter(t *testing.T) {
 					param: &openapi3.Parameter{Name: "param", In: "query", Schema: arrayOf(integerSchema)},
 					query: "param=1&param=foo",
 					found: true,
-					err:   &ParseError{path: []interface{}{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
+					err:   &ParseError{path: []any{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
 				},
 				{
 					name:  "invalid number items",
 					param: &openapi3.Parameter{Name: "param", In: "query", Schema: arrayOf(numberSchema)},
 					query: "param=1.1&param=foo",
 					found: true,
-					err:   &ParseError{path: []interface{}{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
+					err:   &ParseError{path: []any{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
 				},
 				{
 					name:  "invalid boolean items",
 					param: &openapi3.Parameter{Name: "param", In: "query", Schema: arrayOf(booleanSchema)},
 					query: "param=true&param=foo",
 					found: true,
-					err:   &ParseError{path: []interface{}{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
+					err:   &ParseError{path: []any{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
 				},
 			},
 		},
@@ -862,23 +862,39 @@ func TestDecodeParameter(t *testing.T) {
 					name:  "form",
 					param: &openapi3.Parameter{Name: "param", In: "query", Style: "form", Explode: noExplode, Schema: objectSchema},
 					query: "param=id,foo,name,bar",
-					want:  map[string]interface{}{"id": "foo", "name": "bar"},
+					want:  map[string]any{"id": "foo", "name": "bar"},
 					found: true,
 				},
 				{
 					name:  "form explode",
 					param: &openapi3.Parameter{Name: "param", In: "query", Style: "form", Explode: explode, Schema: objectSchema},
 					query: "id=foo&name=bar",
-					want:  map[string]interface{}{"id": "foo", "name": "bar"},
+					want:  map[string]any{"id": "foo", "name": "bar"},
 					found: true,
 				},
 				{
 					name:  "deepObject explode",
 					param: &openapi3.Parameter{Name: "param", In: "query", Style: "deepObject", Explode: explode, Schema: objectSchema},
 					query: "param[id]=foo&param[name]=bar",
-					want:  map[string]interface{}{"id": "foo", "name": "bar"},
+					want:  map[string]any{"id": "foo", "name": "bar"},
 					found: true,
 				},
+				{
+					name:  "no param, for arrays",
+					param: &openapi3.Parameter{Name: "something", In: "query", Schema: stringArraySchema},
+					query: "",
+					want:  nil,
+					found: false,
+					err:   nil,
+				},
+				{
+					name:  "missing param, for arrays",
+					param: &openapi3.Parameter{Name: "something", In: "query", Schema: stringArraySchema},
+					query: "foo=bar",
+					want:  nil,
+					found: false,
+					err:   nil,
+				},
 				{
 					name: "deepObject explode additionalProperties with object properties - missing index on nested array",
 					param: &openapi3.Parameter{
@@ -889,20 +905,20 @@ func TestDecodeParameter(t *testing.T) {
 						),
 					},
 					query: "param[obj][prop2][item2]=def",
-					err:   &ParseError{path: []interface{}{"obj", "prop2", "item2"}, Kind: KindInvalidFormat, Reason: "array items must be set with indexes"},
+					err:   &ParseError{path: []any{"obj", "prop2", "item2"}, Kind: KindInvalidFormat, Reason: "array items must be set with indexes"},
 				},
 				{
 					name:  "deepObject explode array - missing indexes",
 					param: &openapi3.Parameter{Name: "param", In: "query", Style: "deepObject", Explode: explode, Schema: objectOf("items", stringArraySchema)},
 					query: "param[items]=f%26oo&param[items]=bar",
 					found: true,
-					err:   &ParseError{path: []interface{}{"items"}, Kind: KindInvalidFormat, Reason: "array items must be set with indexes"},
+					err:   &ParseError{path: []any{"items"}, Kind: KindInvalidFormat, Reason: "array items must be set with indexes"},
 				},
 				{
 					name:  "deepObject explode array",
 					param: &openapi3.Parameter{Name: "param", In: "query", Style: "deepObject", Explode: explode, Schema: objectOf("items", integerArraySchema)},
 					query: "param[items][1]=456&param[items][0]=123",
-					want:  map[string]interface{}{"items": []interface{}{int64(123), int64(456)}},
+					want:  map[string]any{"items": []any{int64(123), int64(456)}},
 					found: true,
 				},
 				{
@@ -916,8 +932,8 @@ func TestDecodeParameter(t *testing.T) {
 						),
 					},
 					query: "param[obj][prop1]=bar&param[obj][prop2]=foo&param[objTwo]=string",
-					want: map[string]interface{}{
-						"obj":    map[string]interface{}{"prop1": "bar", "prop2": "foo"},
+					want: map[string]any{
+						"obj":    map[string]any{"prop1": "bar", "prop2": "foo"},
 						"objTwo": "string",
 					},
 					found: true,
@@ -932,8 +948,8 @@ func TestDecodeParameter(t *testing.T) {
 						),
 					},
 					query: "param[obj][prop1][item1]=1&param[obj][prop1][item2]=abc",
-					want: map[string]interface{}{
-						"obj": map[string]interface{}{"prop1": map[string]interface{}{
+					want: map[string]any{
+						"obj": map[string]any{"prop1": map[string]any{
 							"item1": int64(1),
 							"item2": "abc",
 						}},
@@ -951,7 +967,7 @@ func TestDecodeParameter(t *testing.T) {
 						),
 					},
 					query: "param[obj][prop1]=notbool&param[objTwo]=string",
-					err:   &ParseError{path: []interface{}{"obj", "prop1"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "notbool"}},
+					err:   &ParseError{path: []any{"obj", "prop1"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "notbool"}},
 				},
 				{
 					name: "deepObject explode nested object additionalProperties - bad index inside additionalProperties",
@@ -965,10 +981,10 @@ func TestDecodeParameter(t *testing.T) {
 					},
 					query: "param[obj][prop1]=bar&param[obj][prop2][badindex]=bad&param[objTwo]=string",
 					err: &ParseError{
-						path:   []interface{}{"obj", "prop2"},
+						path:   []any{"obj", "prop2"},
 						Reason: `path is not convertible to primitive`,
 						Kind:   KindInvalidFormat,
-						Value:  map[string]interface{}{"badindex": "bad"},
+						Value:  map[string]any{"badindex": "bad"},
 					},
 				},
 				{
@@ -982,8 +998,8 @@ func TestDecodeParameter(t *testing.T) {
 						),
 					},
 					query: "param[obj][nestedObjOne]=bar&param[obj][nestedObjTwo]=foo&param[objTwo]=string",
-					want: map[string]interface{}{
-						"obj":    map[string]interface{}{"nestedObjOne": "bar", "nestedObjTwo": "foo"},
+					want: map[string]any{
+						"obj":    map[string]any{"nestedObjOne": "bar", "nestedObjTwo": "foo"},
 						"objTwo": "string",
 					},
 					found: true,
@@ -997,7 +1013,7 @@ func TestDecodeParameter(t *testing.T) {
 						),
 					},
 					query: "anotherparam=bar",
-					want:  map[string]interface{}(nil),
+					want:  map[string]any(nil),
 				},
 				{
 					name: "deepObject explode nested object - bad array item type",
@@ -1008,7 +1024,18 @@ func TestDecodeParameter(t *testing.T) {
 						),
 					},
 					query: "param[objTwo][0]=badint",
-					err:   &ParseError{path: []interface{}{"objTwo", "0"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "badint"}},
+					err:   &ParseError{path: []any{"objTwo", "0"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "badint"}},
+				},
+				{
+					name: "deepObject explode nested object - extraneous deep object param ignored",
+					param: &openapi3.Parameter{
+						Name: "param", In: "query", Style: "deepObject", Explode: explode,
+						Schema: objectOf(
+							"obj", objectOf("nestedObjOne", stringSchema, "nestedObjTwo", stringSchema),
+						),
+					},
+					query: "anotherparam[obj][nestedObjOne]=one&anotherparam[obj][nestedObjTwo]=two",
+					want:  map[string]any(nil),
 				},
 				{
 					name: "deepObject explode deeply nested object - bad array item type",
@@ -1019,7 +1046,7 @@ func TestDecodeParameter(t *testing.T) {
 						),
 					},
 					query: "param[obj][nestedObjOne][0]=badint",
-					err:   &ParseError{path: []interface{}{"obj", "nestedObjOne", "0"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "badint"}},
+					err:   &ParseError{path: []any{"obj", "nestedObjOne", "0"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "badint"}},
 				},
 				{
 					name: "deepObject explode deeply nested object - array index not an int",
@@ -1030,7 +1057,7 @@ func TestDecodeParameter(t *testing.T) {
 						),
 					},
 					query: "param[obj][nestedObjOne][badindex]=badint",
-					err:   &ParseError{path: []interface{}{"obj", "nestedObjOne"}, Kind: KindInvalidFormat, Reason: "could not convert value map to array: array indexes must be integers: strconv.Atoi: parsing \"badindex\": invalid syntax"},
+					err:   &ParseError{path: []any{"obj", "nestedObjOne"}, Kind: KindInvalidFormat, Reason: "could not convert value map to array: array indexes must be integers: strconv.Atoi: parsing \"badindex\": invalid syntax"},
 				},
 				{
 					name: "deepObject explode nested object with array",
@@ -1043,9 +1070,9 @@ func TestDecodeParameter(t *testing.T) {
 						),
 					},
 					query: "param[obj][nestedObjOne]=bar&param[obj][nestedObjTwo]=foo&param[objTwo][0]=f%26oo&param[objTwo][1]=bar",
-					want: map[string]interface{}{
-						"obj":    map[string]interface{}{"nestedObjOne": "bar", "nestedObjTwo": "foo"},
-						"objTwo": []interface{}{"f%26oo", "bar"},
+					want: map[string]any{
+						"obj":    map[string]any{"nestedObjOne": "bar", "nestedObjTwo": "foo"},
+						"objTwo": []any{"f%26oo", "bar"},
 					},
 					found: true,
 				},
@@ -1060,7 +1087,7 @@ func TestDecodeParameter(t *testing.T) {
 						),
 					},
 					query: "param[obj][nestedObjOne]=bar&param[obj][nestedObjTwo]=bad&param[objTwo][0]=f%26oo&param[objTwo][1]=bar",
-					err:   &ParseError{path: []interface{}{"obj", "nestedObjTwo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bad"}},
+					err:   &ParseError{path: []any{"obj", "nestedObjTwo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bad"}},
 				},
 				{
 					name: "deepObject explode nested object with nested array",
@@ -1073,9 +1100,9 @@ func TestDecodeParameter(t *testing.T) {
 						),
 					},
 					query: "param[obj][nestedObjOne]=bar&param[obj][nestedObjTwo]=foo&param[objTwo][items][0]=f%26oo&param[objTwo][items][1]=bar",
-					want: map[string]interface{}{
-						"obj":    map[string]interface{}{"nestedObjOne": "bar", "nestedObjTwo": "foo"},
-						"objTwo": map[string]interface{}{"items": []interface{}{"f%26oo", "bar"}},
+					want: map[string]any{
+						"obj":    map[string]any{"nestedObjOne": "bar", "nestedObjTwo": "foo"},
+						"objTwo": map[string]any{"items": []any{"f%26oo", "bar"}},
 					},
 					found: true,
 				},
@@ -1089,9 +1116,9 @@ func TestDecodeParameter(t *testing.T) {
 						),
 					},
 					query: "param[obj][nestedObjOne][items][0]=baz&param[objTwo][items][0]=foo&param[objTwo][items][1]=bar",
-					want: map[string]interface{}{
-						"obj":    map[string]interface{}{"nestedObjOne": map[string]interface{}{"items": []interface{}{"baz"}}},
-						"objTwo": map[string]interface{}{"items": []interface{}{"foo", "bar"}},
+					want: map[string]any{
+						"obj":    map[string]any{"nestedObjOne": map[string]any{"items": []any{"baz"}}},
+						"objTwo": map[string]any{"items": []any{"foo", "bar"}},
 					},
 					found: true,
 				},
@@ -1104,10 +1131,10 @@ func TestDecodeParameter(t *testing.T) {
 						),
 					},
 					query: "param[arr][1][1]=123&param[arr][1][2]=456",
-					want: map[string]interface{}{
-						"arr": []interface{}{
+					want: map[string]any{
+						"arr": []any{
 							nil,
-							[]interface{}{nil, int64(123), int64(456)},
+							[]any{nil, int64(123), int64(456)},
 						},
 					},
 					found: true,
@@ -1121,12 +1148,12 @@ func TestDecodeParameter(t *testing.T) {
 						),
 					},
 					query: "param[arr][3][key]=true&param[arr][0][key]=false",
-					want: map[string]interface{}{
-						"arr": []interface{}{
-							map[string]interface{}{"key": false},
+					want: map[string]any{
+						"arr": []any{
+							map[string]any{"key": false},
 							nil,
 							nil,
-							map[string]interface{}{"key": true},
+							map[string]any{"key": true},
 						},
 					},
 					found: true,
@@ -1141,10 +1168,10 @@ func TestDecodeParameter(t *testing.T) {
 					},
 					query: "param[arr][0][key]=true&param[arr][1][key]=false",
 					found: true,
-					want: map[string]interface{}{
-						"arr": []interface{}{
-							map[string]interface{}{"key": true},
-							map[string]interface{}{"key": false},
+					want: map[string]any{
+						"arr": []any{
+							map[string]any{"key": true},
+							map[string]any{"key": false},
 						},
 					},
 				},
@@ -1152,7 +1179,7 @@ func TestDecodeParameter(t *testing.T) {
 					name:  "default",
 					param: &openapi3.Parameter{Name: "param", In: "query", Schema: objectSchema},
 					query: "id=foo&name=bar",
-					want:  map[string]interface{}{"id": "foo", "name": "bar"},
+					want:  map[string]any{"id": "foo", "name": "bar"},
 					found: true,
 				},
 				{
@@ -1160,21 +1187,21 @@ func TestDecodeParameter(t *testing.T) {
 					param: &openapi3.Parameter{Name: "param", In: "query", Schema: objectOf("foo", integerSchema)},
 					query: "foo=bar",
 					found: true,
-					err:   &ParseError{path: []interface{}{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
+					err:   &ParseError{path: []any{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
 				},
 				{
 					name:  "invalid number prop",
 					param: &openapi3.Parameter{Name: "param", In: "query", Schema: objectOf("foo", numberSchema)},
 					query: "foo=bar",
 					found: true,
-					err:   &ParseError{path: []interface{}{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
+					err:   &ParseError{path: []any{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
 				},
 				{
 					name:  "invalid boolean prop",
 					param: &openapi3.Parameter{Name: "param", In: "query", Schema: objectOf("foo", booleanSchema)},
 					query: "foo=bar",
 					found: true,
-					err:   &ParseError{path: []interface{}{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
+					err:   &ParseError{path: []any{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
 				},
 			},
 		},
@@ -1260,21 +1287,21 @@ func TestDecodeParameter(t *testing.T) {
 					name:   "simple",
 					param:  &openapi3.Parameter{Name: "X-Param", In: "header", Style: "simple", Explode: noExplode, Schema: stringArraySchema},
 					header: "X-Param:foo,bar",
-					want:   []interface{}{"foo", "bar"},
+					want:   []any{"foo", "bar"},
 					found:  true,
 				},
 				{
 					name:   "simple explode",
 					param:  &openapi3.Parameter{Name: "X-Param", In: "header", Style: "simple", Explode: explode, Schema: stringArraySchema},
 					header: "X-Param:foo,bar",
-					want:   []interface{}{"foo", "bar"},
+					want:   []any{"foo", "bar"},
 					found:  true,
 				},
 				{
 					name:   "default",
 					param:  &openapi3.Parameter{Name: "X-Param", In: "header", Schema: stringArraySchema},
 					header: "X-Param:foo,bar",
-					want:   []interface{}{"foo", "bar"},
+					want:   []any{"foo", "bar"},
 					found:  true,
 				},
 				{
@@ -1282,21 +1309,21 @@ func TestDecodeParameter(t *testing.T) {
 					param:  &openapi3.Parameter{Name: "X-Param", In: "header", Schema: arrayOf(integerSchema)},
 					header: "X-Param:1,foo",
 					found:  true,
-					err:    &ParseError{path: []interface{}{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
+					err:    &ParseError{path: []any{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
 				},
 				{
 					name:   "invalid number items",
 					param:  &openapi3.Parameter{Name: "X-Param", In: "header", Schema: arrayOf(numberSchema)},
 					header: "X-Param:1.1,foo",
 					found:  true,
-					err:    &ParseError{path: []interface{}{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
+					err:    &ParseError{path: []any{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
 				},
 				{
 					name:   "invalid boolean items",
 					param:  &openapi3.Parameter{Name: "X-Param", In: "header", Schema: arrayOf(booleanSchema)},
 					header: "X-Param:true,foo",
 					found:  true,
-					err:    &ParseError{path: []interface{}{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
+					err:    &ParseError{path: []any{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
 				},
 			},
 		},
@@ -1307,21 +1334,21 @@ func TestDecodeParameter(t *testing.T) {
 					name:   "simple",
 					param:  &openapi3.Parameter{Name: "X-Param", In: "header", Style: "simple", Explode: noExplode, Schema: objectSchema},
 					header: "X-Param:id,foo,name,bar",
-					want:   map[string]interface{}{"id": "foo", "name": "bar"},
+					want:   map[string]any{"id": "foo", "name": "bar"},
 					found:  true,
 				},
 				{
 					name:   "simple explode",
 					param:  &openapi3.Parameter{Name: "X-Param", In: "header", Style: "simple", Explode: explode, Schema: objectSchema},
 					header: "X-Param:id=foo,name=bar",
-					want:   map[string]interface{}{"id": "foo", "name": "bar"},
+					want:   map[string]any{"id": "foo", "name": "bar"},
 					found:  true,
 				},
 				{
 					name:   "default",
 					param:  &openapi3.Parameter{Name: "X-Param", In: "header", Schema: objectSchema},
 					header: "X-Param:id,foo,name,bar",
-					want:   map[string]interface{}{"id": "foo", "name": "bar"},
+					want:   map[string]any{"id": "foo", "name": "bar"},
 					found:  true,
 				},
 				{
@@ -1336,21 +1363,21 @@ func TestDecodeParameter(t *testing.T) {
 					param:  &openapi3.Parameter{Name: "X-Param", In: "header", Schema: objectOf("foo", integerSchema)},
 					header: "X-Param:foo,bar",
 					found:  true,
-					err:    &ParseError{path: []interface{}{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
+					err:    &ParseError{path: []any{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
 				},
 				{
 					name:   "invalid number prop",
 					param:  &openapi3.Parameter{Name: "X-Param", In: "header", Schema: objectOf("foo", numberSchema)},
 					header: "X-Param:foo,bar",
 					found:  true,
-					err:    &ParseError{path: []interface{}{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
+					err:    &ParseError{path: []any{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
 				},
 				{
 					name:   "invalid boolean prop",
 					param:  &openapi3.Parameter{Name: "X-Param", In: "header", Schema: objectOf("foo", booleanSchema)},
 					header: "X-Param:foo,bar",
 					found:  true,
-					err:    &ParseError{path: []interface{}{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
+					err:    &ParseError{path: []any{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
 				},
 			},
 		},
@@ -1436,7 +1463,7 @@ func TestDecodeParameter(t *testing.T) {
 					name:   "form",
 					param:  &openapi3.Parameter{Name: "X-Param", In: "cookie", Style: "form", Explode: noExplode, Schema: stringArraySchema},
 					cookie: "X-Param:foo,bar",
-					want:   []interface{}{"foo", "bar"},
+					want:   []any{"foo", "bar"},
 					found:  true,
 				},
 				{
@@ -1444,21 +1471,21 @@ func TestDecodeParameter(t *testing.T) {
 					param:  &openapi3.Parameter{Name: "X-Param", In: "cookie", Style: "form", Explode: noExplode, Schema: arrayOf(integerSchema)},
 					cookie: "X-Param:1,foo",
 					found:  true,
-					err:    &ParseError{path: []interface{}{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
+					err:    &ParseError{path: []any{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
 				},
 				{
 					name:   "invalid number items",
 					param:  &openapi3.Parameter{Name: "X-Param", In: "cookie", Style: "form", Explode: noExplode, Schema: arrayOf(numberSchema)},
 					cookie: "X-Param:1.1,foo",
 					found:  true,
-					err:    &ParseError{path: []interface{}{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
+					err:    &ParseError{path: []any{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
 				},
 				{
 					name:   "invalid boolean items",
 					param:  &openapi3.Parameter{Name: "X-Param", In: "cookie", Style: "form", Explode: noExplode, Schema: arrayOf(booleanSchema)},
 					cookie: "X-Param:true,foo",
 					found:  true,
-					err:    &ParseError{path: []interface{}{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
+					err:    &ParseError{path: []any{1}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "foo"}},
 				},
 			},
 		},
@@ -1469,7 +1496,7 @@ func TestDecodeParameter(t *testing.T) {
 					name:   "form",
 					param:  &openapi3.Parameter{Name: "X-Param", In: "cookie", Style: "form", Explode: noExplode, Schema: objectSchema},
 					cookie: "X-Param:id,foo,name,bar",
-					want:   map[string]interface{}{"id": "foo", "name": "bar"},
+					want:   map[string]any{"id": "foo", "name": "bar"},
 					found:  true,
 				},
 				{
@@ -1477,21 +1504,21 @@ func TestDecodeParameter(t *testing.T) {
 					param:  &openapi3.Parameter{Name: "X-Param", In: "cookie", Style: "form", Explode: noExplode, Schema: objectOf("foo", integerSchema)},
 					cookie: "X-Param:foo,bar",
 					found:  true,
-					err:    &ParseError{path: []interface{}{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
+					err:    &ParseError{path: []any{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
 				},
 				{
 					name:   "invalid number prop",
 					param:  &openapi3.Parameter{Name: "X-Param", In: "cookie", Style: "form", Explode: noExplode, Schema: objectOf("foo", numberSchema)},
 					cookie: "X-Param:foo,bar",
 					found:  true,
-					err:    &ParseError{path: []interface{}{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
+					err:    &ParseError{path: []any{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
 				},
 				{
 					name:   "invalid boolean prop",
 					param:  &openapi3.Parameter{Name: "X-Param", In: "cookie", Style: "form", Explode: noExplode, Schema: objectOf("foo", booleanSchema)},
 					cookie: "X-Param:foo,bar",
 					found:  true,
-					err:    &ParseError{path: []interface{}{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
+					err:    &ParseError{path: []any{"foo"}, Cause: &ParseError{Kind: KindInvalidFormat, Value: "bar"}},
 				},
 			},
 		},
@@ -1585,7 +1612,7 @@ func TestDecodeBody(t *testing.T) {
 	urlencodedPipeDelim.Set("b", "10")
 	urlencodedPipeDelim.Add("c", "c1|c2")
 
-	d, err := json.Marshal(map[string]interface{}{"d1": "d1"})
+	d, err := json.Marshal(map[string]any{"d1": "d1"})
 	require.NoError(t, err)
 	multipartForm, multipartFormMime, err := newTestMultipartForm([]*testFormPart{
 		{name: "a", contentType: "text/plain", data: strings.NewReader("a1")},
@@ -1629,7 +1656,7 @@ func TestDecodeBody(t *testing.T) {
 		body     io.Reader
 		schema   *openapi3.Schema
 		encoding map[string]*openapi3.Encoding
-		want     interface{}
+		want     any
 		wantErr  error
 	}{
 		{
@@ -1687,7 +1714,7 @@ func TestDecodeBody(t *testing.T) {
 				WithProperty("a", openapi3.NewStringSchema()).
 				WithProperty("b", openapi3.NewIntegerSchema()).
 				WithProperty("c", openapi3.NewArraySchema().WithItems(openapi3.NewStringSchema())),
-			want: map[string]interface{}{"a": "a1", "b": int64(10), "c": []interface{}{"c1", "c2"}},
+			want: map[string]any{"a": "a1", "b": int64(10), "c": []any{"c1", "c2"}},
 		},
 		{
 			name: "urlencoded space delimited",
@@ -1700,7 +1727,7 @@ func TestDecodeBody(t *testing.T) {
 			encoding: map[string]*openapi3.Encoding{
 				"c": {Style: openapi3.SerializationSpaceDelimited, Explode: openapi3.BoolPtr(false)},
 			},
-			want: map[string]interface{}{"a": "a1", "b": int64(10), "c": []interface{}{"c1", "c2"}},
+			want: map[string]any{"a": "a1", "b": int64(10), "c": []any{"c1", "c2"}},
 		},
 		{
 			name: "urlencoded pipe delimited",
@@ -1713,7 +1740,7 @@ func TestDecodeBody(t *testing.T) {
 			encoding: map[string]*openapi3.Encoding{
 				"c": {Style: openapi3.SerializationPipeDelimited, Explode: openapi3.BoolPtr(false)},
 			},
-			want: map[string]interface{}{"a": "a1", "b": int64(10), "c": []interface{}{"c1", "c2"}},
+			want: map[string]any{"a": "a1", "b": int64(10), "c": []any{"c1", "c2"}},
 		},
 		{
 			name: "multipart",
@@ -1726,7 +1753,7 @@ func TestDecodeBody(t *testing.T) {
 				WithProperty("d", openapi3.NewObjectSchema().WithProperty("d1", openapi3.NewStringSchema())).
 				WithProperty("f", openapi3.NewStringSchema().WithFormat("binary")).
 				WithProperty("g", openapi3.NewStringSchema()),
-			want: map[string]interface{}{"a": "a1", "b": json.Number("10"), "c": []interface{}{"c1", "c2"}, "d": map[string]interface{}{"d1": "d1"}, "f": "foo", "g": "g1"},
+			want: map[string]any{"a": "a1", "b": json.Number("10"), "c": []any{"c1", "c2"}, "d": map[string]any{"d1": "d1"}, "f": "foo", "g": "g1"},
 		},
 		{
 			name: "multipartExtraPart",
@@ -1734,7 +1761,7 @@ func TestDecodeBody(t *testing.T) {
 			body: multipartFormExtraPart,
 			schema: openapi3.NewObjectSchema().
 				WithProperty("a", openapi3.NewStringSchema()),
-			want:    map[string]interface{}{"a": "a1"},
+			want:    map[string]any{"a": "a1"},
 			wantErr: &ParseError{Kind: KindOther},
 		},
 		{
@@ -1744,7 +1771,7 @@ func TestDecodeBody(t *testing.T) {
 			schema: openapi3.NewObjectSchema().
 				WithAnyAdditionalProperties().
 				WithProperty("a", openapi3.NewStringSchema()),
-			want: map[string]interface{}{"a": "a1"},
+			want: map[string]any{"a": "a1"},
 		},
 		{
 			name: "multipartWithAdditionalProperties",
@@ -1754,7 +1781,7 @@ func TestDecodeBody(t *testing.T) {
 				WithAdditionalProperties(openapi3.NewObjectSchema().
 					WithProperty("x", openapi3.NewStringSchema())).
 				WithProperty("a", openapi3.NewStringSchema()),
-			want: map[string]interface{}{"a": "a1", "x": "x1"},
+			want: map[string]any{"a": "a1", "x": "x1"},
 		},
 		{
 			name: "multipartWithAdditionalPropertiesError",
@@ -1764,7 +1791,7 @@ func TestDecodeBody(t *testing.T) {
 				WithAdditionalProperties(openapi3.NewObjectSchema().
 					WithProperty("x", openapi3.NewStringSchema())).
 				WithProperty("a", openapi3.NewStringSchema()),
-			want:    map[string]interface{}{"a": "a1", "x": "x1"},
+			want:    map[string]any{"a": "a1", "x": "x1"},
 			wantErr: &ParseError{Kind: KindOther},
 		},
 		{
@@ -1838,7 +1865,7 @@ func newTestMultipartForm(parts []*testFormPart) (io.Reader, string, error) {
 
 func TestRegisterAndUnregisterBodyDecoder(t *testing.T) {
 	var decoder BodyDecoder
-	decoder = func(body io.Reader, h http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (decoded interface{}, err error) {
+	decoder = func(body io.Reader, h http.Header, schema *openapi3.SchemaRef, encFn EncodingFn, jsonParser *fastjson.Parser) (decoded any, err error) {
 		var data []byte
 		if data, err = io.ReadAll(body); err != nil {
 			return
diff --git a/internal/platform/validator/req_resp_encoder.go b/internal/platform/validator/req_resp_encoder.go
index 870f06e3..3b5f8b1d 100644
--- a/internal/platform/validator/req_resp_encoder.go
+++ b/internal/platform/validator/req_resp_encoder.go
@@ -5,7 +5,7 @@ import (
 	"fmt"
 )
 
-func encodeBody(body interface{}, mediaType string) ([]byte, error) {
+func encodeBody(body any, mediaType string) ([]byte, error) {
 	encoder, ok := bodyEncoders[mediaType]
 	if !ok {
 		return nil, &ParseError{
@@ -16,7 +16,7 @@ func encodeBody(body interface{}, mediaType string) ([]byte, error) {
 	return encoder(body)
 }
 
-type BodyEncoder func(body interface{}) ([]byte, error)
+type BodyEncoder func(body any) ([]byte, error)
 
 var bodyEncoders = map[string]BodyEncoder{
 	"application/json": json.Marshal,
diff --git a/internal/platform/validator/req_resp_encoder_test.go b/internal/platform/validator/req_resp_encoder_test.go
index 8f746f06..51f7e4db 100644
--- a/internal/platform/validator/req_resp_encoder_test.go
+++ b/internal/platform/validator/req_resp_encoder_test.go
@@ -11,7 +11,7 @@ import (
 
 func TestRegisterAndUnregisterBodyEncoder(t *testing.T) {
 	var encoder BodyEncoder
-	encoder = func(body interface{}) (data []byte, err error) {
+	encoder = func(body any) (data []byte, err error) {
 		return []byte(strings.Join(body.([]string), ",")), nil
 	}
 	contentType := "text/csv"
diff --git a/internal/platform/validator/unknown_parameters_request.go b/internal/platform/validator/unknown_parameters_request.go
index d8310d92..8dfabafd 100644
--- a/internal/platform/validator/unknown_parameters_request.go
+++ b/internal/platform/validator/unknown_parameters_request.go
@@ -178,7 +178,7 @@ func ValidateUnknownRequestParameters(ctx *fasthttp.RequestCtx, route *routers.R
 		}
 	case mType == "application/x-www-form-urlencoded":
 		// required params in paramList
-		paramList, ok := value.(map[string]interface{})
+		paramList, ok := value.(map[string]any)
 		if !ok {
 			return foundUnknownParams, ErrDecodingFailed
 		}
@@ -193,7 +193,7 @@ func ValidateUnknownRequestParameters(ctx *fasthttp.RequestCtx, route *routers.R
 			}
 		})
 	case mType == "application/json" || mType == "multipart/form-data" || suffix == "+json":
-		paramList, ok := value.(map[string]interface{})
+		paramList, ok := value.(map[string]any)
 		if !ok {
 			return foundUnknownParams, ErrDecodingFailed
 		}
@@ -213,7 +213,7 @@ func ValidateUnknownRequestParameters(ctx *fasthttp.RequestCtx, route *routers.R
 			propKeys = append(propKeys, strings.ToLower(key))
 		}
 
-		paramList, ok := value.(map[string]interface{})
+		paramList, ok := value.(map[string]any)
 		if !ok {
 			return foundUnknownParams, ErrDecodingFailed
 		}
@@ -221,7 +221,7 @@ func ValidateUnknownRequestParameters(ctx *fasthttp.RequestCtx, route *routers.R
 		switch len(paramList) {
 		case 1:
 			for _, paramValue := range paramList {
-				params, ok := paramValue.(map[string]interface{})
+				params, ok := paramValue.(map[string]any)
 				if !ok {
 					continue
 				}
diff --git a/internal/platform/validator/validate_request.go b/internal/platform/validator/validate_request.go
index 62f6ac2a..9d5a845e 100644
--- a/internal/platform/validator/validate_request.go
+++ b/internal/platform/validator/validate_request.go
@@ -6,7 +6,9 @@ import (
 	"fmt"
 	"io"
 	"net/http"
+	"net/url"
 	"sort"
+	"strings"
 
 	"github.com/getkin/kin-openapi/openapi3"
 	"github.com/getkin/kin-openapi/openapi3filter"
@@ -30,7 +32,7 @@ var ErrInvalidEmptyValue = errors.New("empty value is not allowed")
 //
 // Note: One can tune the behavior of uniqueItems: true verification
 // by registering a custom function with openapi3.RegisterArrayUniqueItemsChecker
-func ValidateRequest(ctx context.Context, input *openapi3filter.RequestValidationInput, jsonParser *fastjson.Parser) (err error) {
+func ValidateRequest(ctx context.Context, input *openapi3filter.RequestValidationInput, jsonParser *fastjson.Parser) error {
 	var me openapi3.MultiError
 
 	options := input.Options
@@ -50,11 +52,10 @@ func ValidateRequest(ctx context.Context, input *openapi3filter.RequestValidatio
 		security = &route.Spec.Security
 	}
 	if security != nil {
-		if err = ValidateSecurityRequirements(ctx, input, *security); err != nil && !options.MultiError {
-			return
-		}
-
-		if err != nil {
+		if err := ValidateSecurityRequirements(ctx, input, *security); err != nil {
+			if !options.MultiError {
+				return err
+			}
 			me = append(me, err)
 		}
 	}
@@ -68,11 +69,10 @@ func ValidateRequest(ctx context.Context, input *openapi3filter.RequestValidatio
 			}
 		}
 
-		if err = ValidateParameter(ctx, input, parameter); err != nil && !options.MultiError {
-			return
-		}
-
-		if err != nil {
+		if err := ValidateParameter(ctx, input, parameter); err != nil {
+			if !options.MultiError {
+				return err
+			}
 			me = append(me, err)
 		}
 	}
@@ -82,11 +82,11 @@ func ValidateRequest(ctx context.Context, input *openapi3filter.RequestValidatio
 		if options.ExcludeRequestQueryParams && parameter.Value.In == openapi3.ParameterInQuery {
 			continue
 		}
-		if err = ValidateParameter(ctx, input, parameter.Value); err != nil && !options.MultiError {
-			return
-		}
 
-		if err != nil {
+		if err := ValidateParameter(ctx, input, parameter.Value); err != nil {
+			if !options.MultiError {
+				return err
+			}
 			me = append(me, err)
 		}
 	}
@@ -94,11 +94,10 @@ func ValidateRequest(ctx context.Context, input *openapi3filter.RequestValidatio
 	// RequestBody
 	requestBody := operation.RequestBody
 	if requestBody != nil && !options.ExcludeRequestBody {
-		if err = ValidateRequestBody(ctx, input, requestBody.Value, jsonParser); err != nil && !options.MultiError {
-			return
-		}
-
-		if err != nil {
+		if err := ValidateRequestBody(ctx, input, requestBody.Value, jsonParser); err != nil {
+			if !options.MultiError {
+				return err
+			}
 			me = append(me, err)
 		}
 	}
@@ -106,7 +105,37 @@ func ValidateRequest(ctx context.Context, input *openapi3filter.RequestValidatio
 	if len(me) > 0 {
 		return me
 	}
-	return
+
+	return nil
+}
+
+// appendToQueryValues adds to query parameters each value in the provided slice
+func appendToQueryValues[T any](q url.Values, parameterName string, v []T) {
+	for _, i := range v {
+		q.Add(parameterName, fmt.Sprintf("%v", i))
+	}
+}
+
+func joinValues(values []any, sep string) string {
+	strValues := make([]string, len(values))
+	for i, v := range values {
+		strValues[i] = fmt.Sprintf("%v", v)
+	}
+	return strings.Join(strValues, sep)
+}
+
+// populateDefaultQueryParameters populates default values inside query parameters, while ensuring types are respected
+func populateDefaultQueryParameters(q url.Values, parameterName string, value any, explode bool) {
+	switch t := value.(type) {
+	case []any:
+		if explode {
+			appendToQueryValues(q, parameterName, t)
+		} else {
+			q.Add(parameterName, joinValues(t, ","))
+		}
+	default:
+		q.Add(parameterName, fmt.Sprintf("%v", value))
+	}
 }
 
 // ValidateParameter validates a parameter's value by JSON schema.
@@ -127,7 +156,7 @@ func ValidateParameter(ctx context.Context, input *openapi3filter.RequestValidat
 		options = &openapi3filter.Options{}
 	}
 
-	var value interface{}
+	var value any
 	var err error
 	var found bool
 	var schema *openapi3.Schema
@@ -162,7 +191,8 @@ func ValidateParameter(ctx context.Context, input *openapi3filter.RequestValidat
 				// Next check `parameter.Required && !found` will catch this.
 			case openapi3.ParameterInQuery:
 				q := req.URL.Query()
-				q.Add(parameter.Name, fmt.Sprintf("%v", value))
+				explode := parameter.Explode != nil && *parameter.Explode
+				populateDefaultQueryParameters(q, parameter.Name, value, explode)
 				req.URL.RawQuery = q.Encode()
 			case openapi3.ParameterInHeader:
 				req.Header.Add(parameter.Name, fmt.Sprintf("%v", value))
diff --git a/internal/platform/validator/validate_request_test.go b/internal/platform/validator/validate_request_test.go
index c42c04be..31d6df74 100644
--- a/internal/platform/validator/validate_request_test.go
+++ b/internal/platform/validator/validate_request_test.go
@@ -259,7 +259,7 @@ func TestValidateQueryParams(t *testing.T) {
 		name  string
 		param *openapi3.Parameter
 		query string
-		want  map[string]interface{}
+		want  map[string]any
 		err   *openapi3.SchemaError // test ParseError in decoder tests
 	}
 
@@ -298,9 +298,9 @@ func TestValidateQueryParams(t *testing.T) {
 				),
 			},
 			query: "param[obj][prop1][inexistent]=1",
-			want: map[string]interface{}{
-				"obj": map[string]interface{}{
-					"prop1": map[string]interface{}{},
+			want: map[string]any{
+				"obj": map[string]any{
+					"prop1": map[string]any{},
 				},
 			},
 		},
@@ -317,9 +317,9 @@ func TestValidateQueryParams(t *testing.T) {
 				),
 			},
 			query: "param[obj][prop1][item1]=1.123",
-			want: map[string]interface{}{
-				"obj": map[string]interface{}{
-					"prop1": map[string]interface{}{
+			want: map[string]any{
+				"obj": map[string]any{
+					"prop1": map[string]any{
 						"item1": float64(1.123),
 					},
 				},
@@ -347,7 +347,7 @@ func TestValidateQueryParams(t *testing.T) {
 				),
 			},
 			query: "anotherparam=bar",
-			want:  map[string]interface{}(nil),
+			want:  map[string]any(nil),
 		},
 		{
 			name: "deepObject explode additionalProperties with object properties - multiple properties",
@@ -359,15 +359,15 @@ func TestValidateQueryParams(t *testing.T) {
 				),
 			},
 			query: "param[obj][prop1][item1]=1&param[obj][prop1][item2][0]=abc&param[obj][prop2][item1]=2&param[obj][prop2][item2][0]=def",
-			want: map[string]interface{}{
-				"obj": map[string]interface{}{
-					"prop1": map[string]interface{}{
+			want: map[string]any{
+				"obj": map[string]any{
+					"prop1": map[string]any{
 						"item1": int64(1),
-						"item2": []interface{}{"abc"},
+						"item2": []any{"abc"},
 					},
-					"prop2": map[string]interface{}{
+					"prop2": map[string]any{
 						"item1": int64(2),
-						"item2": []interface{}{"def"},
+						"item2": []any{"def"},
 					},
 				},
 			},
@@ -384,7 +384,7 @@ func TestValidateQueryParams(t *testing.T) {
 				),
 			},
 			query: "param[obj]=1",
-			want: map[string]interface{}{
+			want: map[string]any{
 				"obj": int64(1),
 			},
 		},
@@ -397,7 +397,7 @@ func TestValidateQueryParams(t *testing.T) {
 				),
 			},
 			query: "param[obj]=1",
-			want: map[string]interface{}{
+			want: map[string]any{
 				"obj": int64(1),
 			},
 		},
@@ -410,7 +410,7 @@ func TestValidateQueryParams(t *testing.T) {
 				),
 			},
 			query: "param[obj]=true",
-			want: map[string]interface{}{
+			want: map[string]any{
 				"obj": true,
 			},
 		},
@@ -423,8 +423,8 @@ func TestValidateQueryParams(t *testing.T) {
 				),
 			},
 			query: "param[obj][id2]=1&param[obj][name2]=abc",
-			want: map[string]interface{}{
-				"obj": map[string]interface{}{
+			want: map[string]any{
+				"obj": map[string]any{
 					"id2":   "1",
 					"name2": "abc",
 				},
@@ -441,7 +441,7 @@ func TestValidateQueryParams(t *testing.T) {
 			query: "param[obj][id]=1&param[obj][id2]=2",
 			err: &openapi3.SchemaError{
 				SchemaField: "oneOf",
-				Value:       map[string]interface{}{"id": "1", "id2": "2"},
+				Value:       map[string]any{"id": "1", "id2": "2"},
 				Reason:      "value matches more than one schema from \"oneOf\" (matches schemas at indices [0 1])",
 				Schema:      oneofSchemaObject.Value,
 			},
@@ -455,8 +455,8 @@ func TestValidateQueryParams(t *testing.T) {
 				),
 			},
 			query: "param[obj][0]=a&param[obj][1]=b",
-			want: map[string]interface{}{
-				"obj": []interface{}{
+			want: map[string]any{
+				"obj": []any{
 					"a",
 					"b",
 				},
diff --git a/internal/platform/validator/validate_response.go b/internal/platform/validator/validate_response.go
index 50920715..d964b268 100644
--- a/internal/platform/validator/validate_response.go
+++ b/internal/platform/validator/validate_response.go
@@ -79,7 +79,7 @@ func ValidateResponse(ctx context.Context, input *openapi3filter.ResponseValidat
 	}
 
 	content := response.Content
-	if len(content) == 0 || options.ExcludeResponseBody {
+	if len(content) == 0 {
 		// An operation does not contains a validation schema for responses with this status code.
 		return nil
 	}
@@ -146,7 +146,7 @@ func ValidateResponse(ctx context.Context, input *openapi3filter.ResponseValidat
 
 func validateResponseHeader(headerName string, headerRef *openapi3.HeaderRef, input *openapi3filter.ResponseValidationInput, opts []openapi3.SchemaValidationOption) error {
 	var err error
-	var decodedValue interface{}
+	var decodedValue any
 	var found bool
 	var sm *openapi3.SerializationMethod
 	dec := &headerParamDecoder{header: input.Header}
diff --git a/internal/platform/web/response.go b/internal/platform/web/response.go
index 150bfd1c..d841c6ab 100644
--- a/internal/platform/web/response.go
+++ b/internal/platform/web/response.go
@@ -76,7 +76,7 @@ func GetDecompressedRequestBody(req *fasthttp.Request, contentEncoding string) (
 }
 
 // Respond converts a Go value to JSON and sends it to the client.
-func Respond(ctx *fasthttp.RequestCtx, data interface{}, statusCode int) error {
+func Respond(ctx *fasthttp.RequestCtx, data any, statusCode int) error {
 	// If there is nothing to marshal then set status code and return.
 	if statusCode == http.StatusNoContent {
 		ctx.SetStatusCode(statusCode)