Skip to content
Threat Feed
Subscribe

Tag

Go

3 briefs RSS
medium advisory

Dasel Selector Lexer Index-Out-of-Range Panic on Trailing Backslash (CVE-2026-46377)

The dasel selector lexer is vulnerable to an index-out-of-range panic when tokenizing a quoted string that ends with a trailing backslash (e.g., `"\` or `'\`), leading to a process crash if an attacker can control the selector string.

dasel dos panic go
2r
high advisory

go-git Improper Parsing of Malformed Git Objects

go-git may parse malformed Git objects differently than upstream Git, leading to inconsistent interpretation and potentially allowing the signing or verification of commits with altered metadata, as described in CVE-2026-45022.

go-git/go-git/v6 +1 vulnerability git go supply chain
2r
high advisory

Go Markdown Library Out-of-Bounds Read Vulnerability

A vulnerability in the go-markdown library exists where processing a malformed input containing a '<' character that is not followed by a '>' character with a SmartypantsRenderer can lead to an out-of-bounds read or a panic, causing a denial of service.

markdown denial-of-service go out-of-bounds read
2r 1t