CVE-2024-34156

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

Open
LOW (2.6)
  • T

    Tim Bastin detected CVE-2024-34156 with a risk of 2.6

  • logo

    System updated the risk assessment from 2.6 to 1.3

    System recalculated raw risk assessment

  • T

    Tim Bastin fixed CVE-2024-34156

  • T

    Tim Bastin detected CVE-2024-34156 with a risk of 2.6

  • logo

    System updated the risk assessment from 2.6 to 1.3

    System recalculated raw risk assessment

  • logo

    System updated the risk assessment from 1.3 to 2.6

    System recalculated raw risk assessment

  • logo

    System removed scanner:

  • logo

    System removed scanner:

  • logo

    System removed scanner:

  • T

    Tim Bastin fixed CVE-2024-34156

  • logo

    System detected CVE-2024-34156 with a risk of 2.6

  • T

    Tim Bastin fixed CVE-2024-34156

  • logo

    System detected CVE-2024-34156 with a risk of 2.6

Add a comment

Mark as False Positive
Last calculated at:

Affected component

Logo von golang stdlib

Installed version:
1.21.8
Fixed in:
v1.22.7

Quick Fix

Update all Dependencies
Update only stdlib
Copyright © 2025 L3montree GmbH and the DevGuard Contributors. All rights reserved. Version 667098114b5ef45c7830e7aa599604fa65eb818f