encoding/asn1
Go standard library
| Version / range | Status | Type |
|---|---|---|
| 0 to before 1.25.13 | affected | semver |
| 1.26.0-0 to before 1.26.6 | affected | semver |
| 1.27.0-0 to before 1.27.0-rc.3 | affected | semver |
Threat intelligence dashboard
CVE-2026-33818high
Enforce maximum recursion depth in encoding/asn1
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.
Risk score
7.5
CVSS 3.1
- Vendor
- Go standard library
- Product
- encoding/asn1
- CWE
- CWE-400
- Published
- Aug 13, 2026
- Updated
- Oct 31, 2026
- CISA KEV
- Not flagged
Affected products and versions
Technical metrics
7.5
CVSS 3.1
- Severity
- high
- Source
- CISA-ADP
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H