Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-32287

Опубликовано: 26 мар. 2026
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true()".

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:antchfx:xpath:*:*:*:*:*:go:*:*
Версия до 1.3.6 (исключая)

EPSS

Процентиль: 41%
0.00519
Низкий

7.5 High

CVSS3

Дефекты

CWE-835

Связанные уязвимости

CVSS3: 7.5
ubuntu
4 месяца назад

Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true()".

CVSS3: 6.2
redhat
4 месяца назад

Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true()".

msrc
4 месяца назад

Infinite loop in github.com/antchfx/xpath

CVSS3: 7.5
debian
4 месяца назад

Boolean XPath expressions that evaluate to true can cause an infinite ...

CVSS3: 7.5
github
4 месяца назад

XPath: Boolean expression infinite loop leads to denial of service via CPU exhaustion

EPSS

Процентиль: 41%
0.00519
Низкий

7.5 High

CVSS3

Дефекты

CWE-835