CVE-2024-34155

Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.

Open
LOW (1.6)
  • T

    Tim Bastin detected CVE-2024-34155 with a risk of 1.65

  • logo

    System updated the risk assessment from 1.65 to 0.82

    System recalculated raw risk assessment

  • T

    Tim Bastin fixed CVE-2024-34155

  • T

    Tim Bastin detected CVE-2024-34155 with a risk of 1.65

  • logo

    System updated the risk assessment from 1.65 to 0.82

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 0.82 to 1.65

    System recalculated raw risk assessment

  • logo

    System removed scanner:

  • logo

    System removed scanner:

  • logo

    System removed scanner:

  • T

    Tim Bastin fixed CVE-2024-34155

  • logo

    System detected CVE-2024-34155 with a risk of 1.65

  • T

    Tim Bastin fixed CVE-2024-34155

  • logo

    System detected CVE-2024-34155 with a risk of 1.65

Add a comment

Mark as False Positive
Last calculated at:

Affected component

Logo von golang stdlib

Installed version:
1.21.8
Fixed in:
v1.22.7

Quick Fix

Update all Dependencies
Update only stdlib
Copyright © 2025 L3montree GmbH and the DevGuard Contributors. All rights reserved. Version 667098114b5ef45c7830e7aa599604fa65eb818f