encoding/asn1 vulnerabilities

CVEs whose affected-version data names the encoding/asn1 package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-33818High· 7.5

2mo ago

Enforce maximum recursion depth in encoding/asn1

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.

▾ TwilightGo standard library · encoding/asn1EPSS 0.57%via CVEORG