Tag

Dasel

2 briefs RSS

Dasel Selector Lexer Index-Out-of-Range Panic on Trailing Backslash (CVE-2026-46377)

The dasel selector lexer is vulnerable to an index-out-of-range panic when tokenizing a quoted string that ends with a trailing backslash (e.g., `"\` or `'\`), leading to a process crash if an attacker can control the selector string.

dasel dos panic go

2r 1d ago

medium advisory

Dasel Denial-of-Service Vulnerability via Unterminated Regex

2 rules 1 TTP

Dasel versions 3.0.0 to 3.3.1 are vulnerable to a denial-of-service attack (CVE-2026-46378) where the selector lexer enters a non-terminating loop when tokenizing an unterminated regex pattern, causing 100% CPU usage on one core, which can be triggered by an attacker-controlled selector/query string.

dasel denial-of-service CVE-2026-46378

2r 1t 1d ago