https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 14:16:09 +0000 https://cve.radiocsirt.org/vuln/cve-2026-33320 <p><strong>Affected:</strong> TomWright dasel</p> <p>Dasel is a command-line tool and library for querying, modifying, and transforming data structures. Starting in version 3.0.0 and prior to version 3.3.1, Dasel&#39;s YAML reader allows an attacker who can supply YAML for processing to trigger extreme CPU and memory consumption. The issue is in the library&#39;s own `UnmarshalYAML` implementation, which manually resolves alias nodes by recursively following `yaml.Node.Alias` pointers without any expansion budget, bypassing go-yaml v4&#39;s built-in alias expansion limit. Version 3.3.2 contains a patch for the issue.</p> <p><strong>Affected:</strong> TomWright dasel</p> <p>Dasel is a command-line tool and library for querying, modifying, and transforming data structures. Starting in version 3.0.0 and prior to version 3.3.1, Dasel&#39;s YAML reader allows an attacker who can supply YAML for processing to trigger extreme CPU and memory consumption. The issue is in the library&#39;s own `UnmarshalYAML` implementation, which manually resolves alias nodes by recursively following `yaml.Node.Alias` pointers without any expansion budget, bypassing go-yaml v4&#39;s built-in alias expansion limit. Version 3.3.2 contains a patch for the issue.</p> https://cve.radiocsirt.org/vuln/cve-2026-33320