Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 11 MIN AGO
T-11M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2026-33818
Enforce maximum recursion depth in encoding/asn1
High
PUBLISHED
CNA: Go
Base score
7.5
CVSS v3.x
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
View raw JSON
CVE Program record
02
Description
CNA: Go
Enforce maximum recursion depth in encoding/asn1
03
Metadata
SCHEMA: 5.2
Published
2026-08-13 21:58Z
20 HR AGO
Last updated
2026-08-14 16:38Z
2 HR AGO
Reserved
2026-03-23
Assigning CNA
Go
Record state
PUBLISHED
Severity
High (CVSS 7.5)
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
SSVC decision
Exploitation
none
Automatable
yes
Technical Impact
partial
Data version
5.2
Document digest
4566702e84eaabc252e3d1fc836832e86feb8c46728a51d526422da8143fee5f
04
Affected products
PAIRS: 1
Vendor
Product
Versions
Platforms
Go standard library
encoding/asn1
0 to < 1.25.13, 1.26.0-0 to < 1.26.6, 1.27.0-0 to < 1.27.0-rc.3
—
05
References
REFS: 4
go.dev
https://go.dev/issue/80405
groups.google.com
https://groups.google.com/g/golang-announce/c/94pEornpRlI
go.dev
https://go.dev/cl/814980
pkg.go.dev
https://pkg.go.dev/vuln/GO-2026-5972