Go/github.com/tomwright/dasel/v3 CVE-2026-46378: high 7.5, EPSS 0.16%

Dasel: Denial of service in dasel selector lexer due to infinite loop on unterminated regex literal

Action: Upgrade github.com/tomwright/dasel/v3 to 3.10.1 or later.

go get github.com/tomwright/dasel/v3@v3.10.1

Affected

Fixed versions

Sources

• osv: GHSA-m6xr-fvfg-5g64
• https://github.com/TomWright/dasel/security/advisories/GHSA-m6xr-fvfg-5g64
• https://github.com/TomWright/dasel/commit/95f8dd3af12958bf6ca2a737b3ec0267280f86ed
• https://github.com/TomWright/dasel

CVE-2026-46378 · published 2026-05-19T20:09:20Z · modified 2026-09-10T03:51:06.298109761Z · JSON