{"id":"GO-2026-5491","revision":"0027c2154781428094cbc5cb1cbae26d","records":[{"revision":"0027c2154781428094cbc5cb1cbae26d","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5491","aliases":["CVE-2026-46377","GHSA-m5j3-4634-c2vq"],"title":"Dasel: Index-out-of-range panic in dasel selector lexer on trailing backslash in quoted string in github.com/tomwright/dasel","description":"Dasel: Index-out-of-range panic in dasel selector lexer on trailing backslash in quoted string in github.com/tomwright/dasel","state":0,"publishedAt":"2026-06-25T22:34:31+00:00","modifiedAt":"2026-06-25T23:01:18.2607676+00:00","affected":[{"ecosystem":"Go","name":"github.com/tomwright/dasel","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/tomwright/dasel/v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/tomwright/dasel/v3","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"3.0.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/TomWright/dasel/security/advisories/GHSA-m5j3-4634-c2vq"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5491","license":"OSV · upstream source license applies","key":"osv:GO-2026-5491","identifiers":["GO-2026-5491","CVE-2026-46377","GHSA-m5j3-4634-c2vq"]},"retained":false,"historicalAffected":[]}],"coverage":[]}