Description
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- Go standard library / encoding/asn10 – 1.25.13
- Go standard library / encoding/asn11.26.0-0 – 1.26.6
- Go standard library / encoding/asn11.27.0-0 – 1.27.0-rc.3
Updated 16m ago · 8 sources