Lucene search
K

9 matches found

OSV
OSV
added 2026/03/29 3:19 p.m.3 views

GHSA-65XW-VW82-R86X XPath: Boolean expression infinite loop leads to denial of service via CPU exhaustion

Boolean expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true"...

7.5CVSS5.9AI score0.00037EPSS
Exploits1References7
Github Security Blog
Github Security Blog
added 2026/03/29 3:19 p.m.6 views

XPath: Boolean expression infinite loop leads to denial of service via CPU exhaustion

Boolean expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true"...

7.5CVSS5.9AI score0.00037EPSS
Exploits1References7Affected Software1
NVD
NVD
added 2026/03/26 8:16 p.m.1 views

CVE-2026-32287

Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true"...

7.5CVSS0.00037EPSS
Exploits1References5
UbuntuCve
UbuntuCve
added 2026/03/26 8:16 p.m.0 views

CVE-2026-32287

Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true"...

7.5CVSS6.3AI score0.00037EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/03/26 12:0 a.m.2 views

Google Go 安全漏洞

Google Go is a static, strongly typed, compiled, concurrent programming language with garbage collection features from the American company Google. There is a security vulnerability in Google Go, where an expression evaluated as true may lead to infinite loops in logicalQuery.Select, resulting in...

7.5CVSS6.4AI score0.00037EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/03/23 1:35 p.m.3 views

CVE-2026-4645

...

5.8AI score0.00152EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/03/23 1:35 p.m.1 views

CVE-2026-4645

A flaw was found in the github.com/antchfx/xpath component. A remote attacker could exploit this vulnerability by submitting crafted Boolean XPath expressions that evaluate to true. This can cause an infinite loop in the logicalQuery.Select function, leading to 100% CPU utilization and a Denial o...

7.5CVSS5.9AI score0.00152EPSS
Exploits0References6
Snyk
Snyk
added 2026/03/17 8:58 p.m.2 views

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop due to the logicalQuery.Select process. An attacker can cause excessive CPU consumption and denial of service by submitting specially crafted Boolean XPath expressions that always evaluate to true, such as "1=1" or "true"...

8.7CVSS5.9AI score0.00152EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/03/17 12:0 a.m.3 views

PT-2026-28438

Name of the Vulnerable Software and Affected Versions versions prior to 2026-32287 Description Boolean XPath expressions that evaluate to true can cause an infinite loop within the logicalQuery.Select function, resulting in 100% CPU utilization. This condition can be initiated by top-level...

7.5CVSS5.9AI score0.00037EPSS
Exploits1References13
Rows per page
Query Builder