Описание
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| golang-1.27 | fixed | 1.27~rc3-1 | package | |
| golang-1.26 | fixed | 1.26.6-1 | package | |
| golang-1.25 | fixed | 1.25.13-1 | package | |
| golang-1.24 | removed | package | ||
| golang-1.24 | no-dsa | trixie | package | |
| golang-1.19 | removed | package | ||
| golang-1.15 | removed | package |
Примечания
https://github.com/golang/go/issues/80481
Fixed by: https://github.com/golang/go/commit/d5eeaa7de337f01173036096619cba09e31bde1a (go1.27rc3)
Fixed by: https://github.com/golang/go/commit/9918f26ab31a6bf9209ecc06465cab0e287e90f1 (go1.26.6)
Fixed by: https://github.com/golang/go/commit/b952d04e2ab03d7b9049b2909e66dc91707089b4 (go1.25.13)
EPSS
Связанные уязвимости
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.
EPSS