CVE-2026-32287

Published: Mar 26, 2026 Last Modified: Mar 26, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as '1=1' or 'true()'.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0002
Percentile
0,0th
Updated

Single Data Point

Only one EPSS measurement is available for this CVE. Trend analysis requires multiple data points over time.

https://github.com/antchfx/xpath/commit/afd4762cc342af56345…
https://github.com/antchfx/xpath/commit/afd4762cc342af56345a3fb4002a59281fcab494
https://github.com/antchfx/xpath/issues/121
https://github.com/antchfx/xpath/issues/121
https://github.com/golang/vulndb/issues/4526
https://github.com/golang/vulndb/issues/4526
https://pkg.go.dev/vuln/GO-2026-4526
https://pkg.go.dev/vuln/GO-2026-4526