- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 5 · 5 medium
- Registry
- pkg.go.dev
Advisories 5
- CVE-2026-59168Medium 6.2
Dasel: Unbounded recursion in JSON and XML readers causes unrecoverable stack-overflow DoS
Affected: from 3.0.0, fixed in 3.11.1.
- CVE-2026-62866Medium 6.2
Dasel: Selector lexer panics on trailing whitespace in `parseCurRune`
Affected: from 3.0.0, fixed in 3.11.2.
- CVE-2026-46377Medium 6.2
Dasel: Index-out-of-range panic in dasel selector lexer on trailing backslash in quoted string
Affected: from 3.0.0; from 3.0.0, through 3.10.0.
- CVE-2026-46378Medium 6.2
Dasel: Denial of service in dasel selector lexer due to infinite loop on unterminated regex literal
Affected: from 3.0.0, fixed in 3.10.1.
- CVE-2026-33320Medium 6.2
Dasel has unbounded YAML alias expansion in dasel leads to CPU/memory denial of service
Affected: from 3.0.0, fixed in 3.3.2.