Go Standard Library Encoding/Asn1 vulnerabilities
2 vulnerabilities
Known vulnerabilities in Go Standard Library Encoding/Asn1, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2026-33818go standard library · encoding/asn1 +4742 moreEnforce maximum recursion depth in encoding/asn1Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.CVSS7.5HighEPSS0.57%RoutineCVE-2025-58185go standard library · encoding/asn1 +2335 moreParsing DER payload can cause memory exhaustion in encoding/asn1Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion.CVSS5.3MediumEPSS0.56%