Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Sep 7, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade golang-srcUpgrade golangUpgrade golang-docsUpgrade golang-sharedUpgrade golang-testsUpgrade golang-bin | Sep 1, 2026 | Aug 13, 2026 |
| Redhat Openshift | — | Upgrade cri-oUpgrade cri-toolsUpgrade ose-crio-credential-providerUpgrade openshift | Sep 16, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade libslirp-debuginfoUpgrade criu-libsUpgrade ignition-validate-debuginfoUpgrade ignition-grubUpgrade ignition-edgeUpgrade podman-gvproxy-debuginfoUpgrade criu-debuginfoUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade golang-srcUpgrade golang-binUpgrade runc-debugsourceUpgrade podmanUpgrade containernetworking-pluginsUpgrade rhc-worker-playbookUpgrade delve-debuginfoUpgrade fuse-overlayfsUpgrade python3-criuUpgrade golang-testsUpgrade image-builderUpgrade osbuild-composerUpgrade grafanaUpgrade rhc-worker-playbook-debuginfoUpgrade runcUpgrade git-lfsUpgrade opentelemetry-collectorUpgrade git-lfs-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade criu-debugsourceUpgrade containers-commonUpgrade ignitionUpgrade buildah-tests-debuginfoUpgrade aardvark-dnsUpgrade podman-remote-debuginfoUpgrade libslirp-develUpgrade runc-debuginfoUpgrade podman-plugins-debuginfoUpgrade golangUpgrade flightctl-cliUpgrade image-builder-debugsourceUpgrade buildah-debuginfoUpgrade golang-miscUpgrade grafana-debuginfoUpgrade conmon-debuginfoUpgrade go-toolsetUpgrade conmon-debugsourceUpgrade buildahUpgrade flightctl-selinuxUpgrade osbuild-composer-tests-debuginfoUpgrade grafana-selinuxUpgrade osbuild-composer-coreUpgrade osbuild-composer-core-debuginfoUpgrade skopeo-testsUpgrade osbuild-composer-workerUpgrade toolboxUpgrade libslirpUpgrade delve-debugsourceUpgrade osbuild-composer-debuginfoUpgrade container-selinuxUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade podman-debugsourceUpgrade skopeoUpgrade crun-debuginfoNo solution existsUpgrade critUpgrade udicaUpgrade osbuild-composer-dnf-jsonUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade ignition-validateUpgrade ignition-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade rhc-worker-playbook-debugsourceUpgrade slirp4netns-debuginfoUpgrade netavarkUpgrade ipp-usbUpgrade ignition-debuginfoUpgrade flightctl-servicesUpgrade criuUpgrade osbuild-composer-worker-debuginfoUpgrade podman-testsUpgrade libslirp-debugsourceUpgrade conmonUpgrade cockpit-podmanUpgrade podman-dockerUpgrade podman-catatonitUpgrade ipp-usb-debuginfoUpgrade golang-docsUpgrade crunUpgrade buildah-debugsourceUpgrade toolbox-debugsourceUpgrade slirp4netnsUpgrade podman-pluginsUpgrade git-lfs-debugsourceUpgrade flightctl-agentUpgrade slirp4netns-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade image-builder-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-catatonit-debuginfoUpgrade grafana-debugsourceUpgrade toolbox-testsUpgrade python3-podmanUpgrade delveUpgrade flightctl-observabilityUpgrade criu-libs-debuginfoUpgrade podman-gvproxyUpgrade toolbox-debuginfoUpgrade golang-raceUpgrade osbuild-composer-debugsource | Aug 17, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade delve-debuginfoUpgrade crun-debugsourceUpgrade crun-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade toolboxUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade osbuild-composer-coreUpgrade podman-gvproxyUpgrade containers-commonUpgrade criu-develUpgrade go-toolsetUpgrade conmonUpgrade slirp4netnsUpgrade criu-libsUpgrade libslirpUpgrade podman-remote-debuginfoUpgrade conmon-debugsourceUpgrade netavarkUpgrade aardvark-dnsUpgrade buildah-tests-debuginfoUpgrade conmon-debuginfoUpgrade skopeo-testsUpgrade image-builder-debugsourceUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade podman-testsUpgrade libslirp-develUpgrade ipp-usbUpgrade osbuild-composer-debuginfoUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade golangUpgrade criu-debuginfoUpgrade golang-raceUpgrade grafanaUpgrade oci-seccomp-bpf-hookUpgrade opentelemetry-collectorUpgrade ipp-usb-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-debuginfoUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade runc-debugsourceUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade criu-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-pluginsUpgrade osbuild-composer-workerUpgrade toolbox-testsUpgrade delveUpgrade critUpgrade libslirp-debugsourceUpgrade grafana-debuginfoUpgrade buildah-debugsourceUpgrade osbuild-composerUpgrade grafana-debugsourceUpgrade image-builder-debuginfoUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade podman-remoteUpgrade delve-debugsourceUpgrade grafana-selinuxUpgrade criuUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade buildahUpgrade osbuild-composer-worker-debuginfoUpgrade image-builderUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade podman-debuginfoUpgrade runcUpgrade osbuild-composer-debugsourceUpgrade fuse-overlayfsUpgrade toolbox-debugsourceUpgrade podman-debugsourceUpgrade libslirp-debuginfoUpgrade golang-binUpgrade buildah-tests | Aug 28, 2026 | Aug 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub