Security: TomWright/dasel
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Unbounded recursion in JSON and XML readers causes unrecoverable stack-overflow DoSGHSA-cqxr-jxr2-85pq published
Jun 27, 2026 by TomWrightModerate -
Selector lexer panics on trailing whitespace in `parseCurRune`GHSA-65gg-g7rw-6cpc published
Jun 27, 2026 by TomWrightModerate -
Unbounded YAML alias expansion in dasel leads to CPU/memory denial of serviceGHSA-4fcp-jxh7-23x8 published
Mar 18, 2026 by TomWrightModerate -
Denial of service in dasel selector lexer due to infinite loop on unterminated regex literalGHSA-m6xr-fvfg-5g64 published
May 13, 2026 by TomWrightModerate -
Index-out-of-range panic in dasel selector lexer on trailing backslash in quoted stringGHSA-m5j3-4634-c2vq published
May 13, 2026 by TomWrightModerate