Approved changes feed: RSS · Atom

cpe:2.3:a:antchfx:xpath:*:*:*:*:*:go:*:*

part: a version: * update: *

VendorAntchfx (800d6fa5-1645-5fe7-8122-95200fb15296)
ProductXpath (599022b8-309a-59a5-9b6b-e123ad59e24a)
Edition*
Language*
Software edition*
Target softwarego
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/antchfx/xpath purl2cpe 2026-06-01 10:11:38.414594
pkg:golang/github.com/antchfx/xpath purl2cpe 2026-06-01 10:11:38.414595

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-32287 vulnerable 2026-06-08 07:57:17.363127 Infinite loop in github.com/antchfx/xpath
Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true()".
Published: 2026-03-26T19:40:52.142Z
Updated: 2026-03-30T14:55:05.920Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.