CVE-2026-33818

HighCVSS 7.5

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 14/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.

Risk Assessment

An attacker can send specially crafted data that causes the application to crash (e.g., via stack overflow), potentially leading to denial of service.

Recommendation

It is recommended to update the library to a version that includes a recursion limit, and to avoid processing untrusted data without proper safeguards.

Original NVD description (English source)

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.