Skip to content

Vulnerabilities of Go standard library encoding/gob

Is your version affected?

CVE Summary Score Published
CVE-2024-34156 Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 7.5 High Sep 6, 2024
CVE-2022-30635 Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a… 7.5 High Aug 9, 2022

Other Go standard library products