Security Advisory catalog CVE-2026-46377 CVE-2026-46377 Published
Dasel: Index-out-of-range panic in dasel selector lexer on trailing backslash in quoted string Overview Affected History Connections
cve-program · CVE-2026-46377 Published dasel Vendor product
Original vendor version evidence · not evaluated as a NuGet range {
"vendor": "TomWright",
"product": "dasel",
"versions": [
{
"version": ">= 3.0.0, < 3.10.1",
"status": "affected"
}
]
}
nvd · CVE-2026-46377 Published No affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.
osv · GHSA-m5j3-4634-c2vq Published github.com/tomwright/dasel/v3 Go
SEMVER · introduced 3.0.0 → last_affected 3.10.0
osv · GO-2026-5491 Published github.com/tomwright/dasel Go
SEMVER · introduced 0
github.com/tomwright/dasel/v2 Go
SEMVER · introduced 0
github.com/tomwright/dasel/v3 Go
SEMVER · introduced 3.0.0