Go standard library Encoding/asn1 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Go standard library Encoding/asn1: 2 record(s), with affected versions and fixes.

CVE-2026-33818 High · 7.5 CWE-400 Aug 13, 2026

Enforce maximum recursion depth in encoding/asn1

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.

CVE-2025-58185 Medium · 5.3 CWE-770 Oct 29, 2025

Parsing DER payload can cause memory exhaustion in encoding/asn1

Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion.