Fluid Attacks Database

Description

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 12	golang-1.19	=1.19.10-1 \|\| =1.19.10-2 \|\| =1.19.11-1 \|\| =1.19.12-1 \|\| =1.19.12-2 \|\| =1.19.12-2~bpo11+1 \|\| =1.19.12-2~bpo12+1 \|\| =1.19.13-1 \|\| =1.19.13-1~bpo11+1 \|\| =1.19.13-1~bpo12+1 \|\| =1.19.8-2 \|\| =1.19.9-1	-
rpm rhel8	go-toolset	<0:1.26.7-1.module+el8.10.0+24751+b3673b3e	0:1.26.7-1.module+el8.10.0+24751+b3673b3e
rpm rhel10.0	git-lfs	<0:3.6.1-2.el10_0.7	0:3.6.1-2.el10_0.7
rpm rhel10.0	golang	<0:1.26.7-1.el10_0	0:1.26.7-1.el10_0
rpm rhel9.6	grafana-pcp	<0:5.1.1-15.el9_6.1	0:5.1.1-15.el9_6.1
rpm rhel9.6	osbuild-composer	<0:132.2-12.el9_6	0:132.2-12.el9_6
rpm rhel10.2	buildah	<2:1.43.1-5.el10_2	2:1.43.1-5.el10_2
rpm rhel10.0	delve	<0:1.26.1-2.el10_0	0:1.26.1-2.el10_0
rpm rhel9.6	delve	<0:1.26.1-1.el9_6.1	0:1.26.1-1.el9_6.1
rpm rhel9.6	git-lfs	<0:3.6.1-2.el9_6.7	0:3.6.1-2.el9_6.7

1-10 of 74

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.