Lucene search

K
osvGoogleOSV:BIT-GOLANG-2022-1962
HistoryMar 06, 2024 - 11:02 a.m.

BIT-golang-2022-1962

2024-03-0611:02:59
Google
osv.dev
3
uncontrolled recursion
parse functions
stack exhaustion
nested types
declarations
software

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.8%

Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply nested types or declarations.

CPENameOperatorVersion
golanglt1.17.12
golanglt1.18.4
golangge1.18.0