Go Standard Library Encoding Xml vulnerabilities
3 known vulnerabilities affecting go_standard_library/encoding_xml.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH3
Vulnerabilities
Page 1 of 1
CVE-2022-28131P3HIGHCVSS 7.5fixed in 1.17.12≥ 1.18.0-0, < 1.18.42022-08-10
CVE-2022-28131 [HIGH] CWE-674 CVE-2022-28131: Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an att
Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.
nvd
CVE-2022-30633P3HIGHCVSS 7.5fixed in 1.17.12≥ 1.18.0-0, < 1.18.42022-08-10
CVE-2022-30633 [HIGH] CWE-674 CVE-2022-30633: Uncontrolled recursion in Unmarshal in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attack
Uncontrolled recursion in Unmarshal in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via unmarshalling an XML document into a Go struct which has a nested field that uses the 'any' field tag.
nvd
CVE-2026-56859P3HIGHCVSS 7.5fixed in 1.25.13≥ 1.26.0-0, < 1.26.6+1 more2026-08-13
CVE-2026-56859 [HIGH] CWE-770 CVE-2026-56859: Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.
nvd