Fluid Attacks Database

Description

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel9	buildah	-	-
go	stdlib	>=0 <1.25.13	1.25.13
debian 14	golang-1.26	=1.26.0-1 \|\| =1.26.1-1 \|\| =1.26.2-1 \|\| =1.26.2-2 \|\| =1.26.2-3 \|\| =1.26.3-1 \|\| =1.26.3-1~bpo13+1 \|\| =1.26.3-2 \|\| =1.26.3-2~bpo13+1 \|\| =1.26.4-1 \|\| =1.26.4-1~bpo13+1 \|\| =1.26.5-1 \|\| =1.26.5-1~bpo13+1 \|\| =1.26~rc2-1 \|\| =1.26~rc3-1 \|\| =1.26~rc3-2 \|\| >=0 <1.26.6-1	1.26.6-1
rpm rhel10	delve	-	-
rpm rhel10	osbuild-composer	<0:165.1-3.el10_2.2	0:165.1-3.el10_2.2
rpm rhel9	osbuild-composer	<0:165.1-4.el9_8.1	0:165.1-4.el9_8.1
rpm rhel10	podman	<7:5.8.2-9.el10_2	7:5.8.2-9.el10_2
rpm rhel9	podman	<6:5.8.2-7.el9_8	6:5.8.2-7.el9_8
rpm rhel10	yggdrasil-worker-package-manager	<0:0.2.3-7.el10_2.8	0:0.2.3-7.el10_2.8
rpm rhel8	osbuild-composer	<0:101.5-2.el8_10	0:101.5-2.el8_10

1-10 of 57

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.