Tag
medium
advisory
Dasel Selector Lexer Index-Out-of-Range Panic on Trailing Backslash (CVE-2026-46377)
2 rulesThe dasel selector lexer is vulnerable to an index-out-of-range panic when tokenizing a quoted string that ends with a trailing backslash (e.g., `"\` or `'\`), leading to a process crash if an attacker can control the selector string.
dasel
dos
panic
go
2r
high
advisory
go-git Improper Parsing of Malformed Git Objects
2 rulesgo-git may parse malformed Git objects differently than upstream Git, leading to inconsistent interpretation and potentially allowing the signing or verification of commits with altered metadata, as described in CVE-2026-45022.
go-git/go-git/v6 +1
vulnerability
git
go
supply chain
2r
high
advisory
Go Markdown Library Out-of-Bounds Read Vulnerability
2 rules 1 TTPA vulnerability in the go-markdown library exists where processing a malformed input containing a '<' character that is not followed by a '>' character with a SmartypantsRenderer can lead to an out-of-bounds read or a panic, causing a denial of service.
markdown
denial-of-service
go
out-of-bounds read
2r
1t