CVE-2026-32287
Infinite loop in github.com/antchfx/xpath
Résumé
Infinite loop in github.com/antchfx/xpath
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true()".
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2026-32287 golang-github-antchfx-xpath
- Ubuntu UBUNTU-CVE-2026-32287 golang-github-antchfx-xpath
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- report github.com
- report github.com
- report securityinfinity.com
- web pkg.go.dev
- web pkg.go.dev