CVE-2026-56859
High
Add recursion depth guard during decode in encoding/xml
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.
Exploit probability
Not scored
Published
August 19, 2026
Required by
Not available
Last source change
August 19, 2026
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
GO-2026-6088
View original source
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.
Open Source Vulnerabilities
BIT-golang-2026-56859
View original source
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.
05 / REFERENCES