CVE-2022-30633

score

<0.1

cvss

7.5

epss

2.1%

published

2022-08-10

kev added

—

first seen

2026-10-21

encoding/xml before Go 1.17.12 and 1.18.4 contains uncontrolled recursion caused by unmarshalling an XML document into a struct with nested 'any' fields, letting attackers cause a panic via stack exhaustion, exploit requires crafted XML input.