Enforce maximum recursion depth in encoding/asn1

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-33818 · Microsoft / collected KEV context

EUVD-2026-58508

GHSA-xc2p-8ggw-6cr5

GO-2026-5972

BIT-golang-2026-33818

cve-program · CVE-2026-33818

• https://go.dev/issue/80405
• https://groups.google.com/g/golang-announce/c/94pEornpRlI
• https://go.dev/cl/814980
• https://pkg.go.dev/vuln/GO-2026-5972

euvd · EUVD-2026-58508

• https://go.dev/issue/80405
• https://groups.google.com/g/golang-announce/c/94pEornpRlI
• https://go.dev/cl/814980
• https://pkg.go.dev/vuln/GO-2026-5972

nvd · CVE-2026-33818

• https://go.dev/cl/814980
• https://go.dev/issue/80405
• https://groups.google.com/g/golang-announce/c/94pEornpRlI
• https://pkg.go.dev/vuln/GO-2026-5972

osv · GO-2026-5972

• https://go.dev/issue/80405
• https://groups.google.com/g/golang-announce/c/94pEornpRlI
• https://go.dev/cl/814980

• Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. · Advisory content revised · 7 Nov 2026
• Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. · Advisory content revised · 5 Nov 2026
• Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. · Advisory content revised · 1 Nov 2026
• Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. · Advisory content revised · 30 Oct 2026