Threats tagged 'ghsa-xc2p-8ggw-6cr5'

CVE-2026-33818 is a high-severity vulnerability in the Go standard library's encoding/asn1 package. It involves uncontrolled resource consumption due to the lack of a recursion limit in the Unmarshal function, which can lead to stack exhaustion when parsing deeply nested or recursive ASN.1 structures. This flaw has been addressed in versions 1.25.13, 1.26.6, and 1.27.0-rc.3 of the Go standard library.