EN
Product
encoding/xml
by Go standard library · last CVE Aug 13, 2026
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 0Low 0
Watch

Add encoding/xml to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-56859
7.5
1%
Aug 13
Add recursion depth guard during decode in encoding/xml
Affected: before 1.25.13; 1.26.0-0 before 1.26.6; 1.27.0-0 before 1.27.0-rc.3
CVE-2022-30633
7.5
2%
Aug 9
Stack exhaustion when unmarshaling certain documents in encoding/xml
Affected: before 1.17.12; 1.18.0-0 before 1.18.4
CVE-2022-28131
7.5
3%
Aug 9
Stack exhaustion from deeply nested XML documents in encoding/xml
Affected: before 1.17.12; 1.18.0-0 before 1.18.4
Showing 3