Security Advisory catalog GO-2026-5493 GO-2026-5493 Published
Dasel: Denial of service in dasel selector lexer due to infinite loop on unterminated regex literal Overview Affected History Connections
cve-program · CVE-2026-46378 Published dasel Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TomWright",
"product": "dasel",
"versions": [
{
"version": ">= 3.0.0, < 3.10.1",
"status": "affected"
}
]
}
nvd · CVE-2026-46378 Published No affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.
osv · GHSA-m6xr-fvfg-5g64 Published github.com/tomwright/dasel/v3 Go
SEMVER · introduced 3.0.0 → fixed 3.10.1
osv · GO-2026-5493 Published github.com/tomwright/dasel Go
SEMVER · introduced 0
github.com/tomwright/dasel/v2 Go
SEMVER · introduced 0
github.com/tomwright/dasel/v3 Go
SEMVER · introduced 3.0.0 → fixed 3.10.1