Skip to content
Threat Feed

Tag

CVE-2026-46378

1 brief RSS
medium advisory

Dasel Denial-of-Service Vulnerability via Unterminated Regex

Dasel versions 3.0.0 to 3.3.1 are vulnerable to a denial-of-service attack (CVE-2026-46378) where the selector lexer enters a non-terminating loop when tokenizing an unterminated regex pattern, causing 100% CPU usage on one core, which can be triggered by an attacker-controlled selector/query string.

dasel denial-of-service CVE-2026-46378
2r 1t