Skip to content
Sign in
4.3 Medium

CVE-2024-34155 Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to…

Description

Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.

Affected products and versions

Product Affected versions Fixed in
go/parser 1.23 1.23.0-0 → < 1.23.1 1.23.1
go/parser 1.22 earliest → < 1.22.7 1.22.7

Other CVEs of go/parser

The 2 CVEs of go/parser →
CVE-2022-1962 Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause… 5.5 Medium
Track this CVE