CVE-2025-58190 affecting package dasel for versions less than 2.8.1-3

CVE-2025-58190 affecting package dasel for versions less than 2.8.1-3. A patched version of the package is available...

AZL-76925 CVE-2025-58190 affecting package dasel for versions less than 2.8.1-3

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

AZL-76922 CVE-2025-47911 affecting package dasel for versions less than 2.8.1-3

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

CVE-2024-45338 affecting package dasel for versions less than 2.8.1-2

CVE-2024-45338 affecting package dasel for versions less than 2.8.1-2. A patched version of the package is available...

CVE-2025-22872 affecting package dasel for versions less than 2.8.1-2

CVE-2025-22872 affecting package dasel for versions less than 2.8.1-2. A patched version of the package is available...

AZL-64185 CVE-2025-22872 affecting package dasel for versions less than 2.8.1-2

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

AZL-64182 CVE-2024-45338 affecting package dasel for versions less than 2.8.1-2

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...