8 matches found
CVE-2026-32287
A flaw was found in github.com/antchfx/xpath. An attacker could exploit this vulnerability by providing specially crafted boolean XPath expressions that evaluate to true. This can cause an infinite loop within the logicalQuery.Select function, leading to 100% CPU utilization. The consequence is a...
EUVD-2026-14434
A flaw was found in the github.com/antchfx/xpath component. A remote attacker could exploit this vulnerability by submitting crafted Boolean XPath expressions that evaluate to true. This can cause an infinite loop in the logicalQuery.Select function, leading to 100% CPU utilization and a Denial o...
CVE-2026-32287
Boolean XPath expressions evaluating to true can trigger an infinite loop in the logicalQuery.Select function, resulting in 100% CPU usage and a denial-of-service (DoS) condition. This can be initiated by top-level selectors like "1=1" or "true()". Affected Products and Versions: BIG-IP Next SPK ...
SUSE CVE-2026-4645
Duplicate of CVE-2026-32287...
UBUNTU-CVE-2026-4645
A flaw was found in the github.com/antchfx/xpath component. A remote attacker could exploit this vulnerability by submitting crafted Boolean XPath expressions that evaluate to true. This can cause an infinite loop in the logicalQuery.Select function, leading to 100% CPU utilization and a Denial o...
