Description (CNA)
Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true()".
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| github.com/antchfx/xpath / github.com/antchfx/xpath | affected 0 before 1.3.6 |
CWE
No CWE identifiers supplied.
References
- https://github.com/antchfx/xpath/issues/121
- https://github.com/antchfx/xpath/commit/afd4762cc342af56345a3fb4002a59281fcab494
- https://github.com/golang/vulndb/issues/4526
- https://pkg.go.dev/vuln/GO-2026-4526
ADP enrichment
No English description supplied.