CVE-2026-56859

CVE-2026-56859 affects the Go encoding/xml DecodeElement path; the underlying issue was that DecodeElement could reset the recursion depth counter, causing it to never fire and potentially exhaust the stack. The public records indicate the fix is to add a recursion depth guard during decode in en...