- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 2 high
- Registry
- pkg.go.dev
Advisories 3
- CVE-2026-56859High 7.5
Add recursion depth guard during decode in encoding/xml
Affected: fixed in 1.25.13; from 1.26.0-0, fixed in 1.26.6; from 1.27.0-0, fixed in 1.27.0-rc.3.
- CVE-2022-30633High 7.5
Stack exhaustion when unmarshaling certain documents in encoding/xml
Affected: fixed in 1.17.12; from 1.18.0-0, fixed in 1.18.4.
- CVE-2022-28131Unrated
Stack exhaustion from deeply nested XML documents in encoding/xml
Affected: fixed in 1.17.12; from 1.18.0-0, fixed in 1.18.4.