CVE-2024-34155

Medium

Published: —Translated: 06/07/2026(UTC)NVD NIST

Summary

A vulnerability in the Go standard parser causes a panic when processing source code with deeply nested literals. The issue stems from stack exhaustion during recursive parsing.

Risk Assessment

An attacker can crash the application by supplying specially crafted Go source code, leading to a denial of service (DoS).

Recommendation

Update the Go environment to a patched version (e.g., 1.22.7 or 1.23.1) and restrict the ability to submit untrusted source code to the parser.

Original NVD description (English source)

Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.