Vulnerabilities > Uncontrolled Recursion

DATE CVE VULNERABILITY TITLE RISK
2022-08-10 CVE-2022-1962 Uncontrolled Recursion vulnerability in Golang GO
Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply nested types or declarations.
local
low complexity
golang CWE-674
5.5
2022-08-10 CVE-2022-28131 Uncontrolled Recursion vulnerability in multiple products
Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.
network
low complexity
golang fedoraproject netapp CWE-674
7.5
2022-08-10 CVE-2022-30630 Uncontrolled Recursion vulnerability in Golang GO
Uncontrolled recursion in Glob in io/fs before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path which contains a large number of path separators.
network
low complexity
golang CWE-674
7.5
2022-08-10 CVE-2022-30631 Uncontrolled Recursion vulnerability in Golang GO
Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compressed files.
network
low complexity
golang CWE-674
7.5
2022-08-10 CVE-2022-30632 Uncontrolled Recursion vulnerability in Golang GO
Uncontrolled recursion in Glob in path/filepath before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a path containing a large number of path separators.
network
low complexity
golang CWE-674
7.5
2022-08-10 CVE-2022-30633 Uncontrolled Recursion vulnerability in Golang GO
Uncontrolled recursion in Unmarshal in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via unmarshalling an XML document into a Go struct which has a nested field that uses the 'any' field tag.
network
low complexity
golang CWE-674
7.5
2022-08-10 CVE-2022-30635 Uncontrolled Recursion vulnerability in Golang GO
Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.
network
low complexity
golang CWE-674
7.5
2022-08-01 CVE-2022-31173 Uncontrolled Recursion vulnerability in Juniper Project Juniper
Juniper is a GraphQL server library for Rust.
network
low complexity
juniper-project CWE-674
7.5
2022-06-28 CVE-2022-31052 Uncontrolled Recursion vulnerability in multiple products
Synapse is an open source home server implementation for the Matrix chat network.
network
low complexity
matrix fedoraproject CWE-674
6.5
2022-06-27 CVE-2022-31099 Uncontrolled Recursion vulnerability in Pomsky-Lang Pomsky
rulex is a new, portable, regular expression language.
network
low complexity
pomsky-lang CWE-674
4.0