{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"3.0.0","last_affected":"3.10.0"}],"component":"github.com/tomwright/dasel/v3","cve_ids":["CVE-2026-46377"],"ecosystem":"Go","epss":0.00188,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-m5j3-4634-c2vq","id":"tcs_01M5KFF8MNHJ5CSGK075DHKE3A","modified_at":"2026-09-10T03:51:06.295659962Z","published_at":"2026-05-19T20:08:12Z","references":["https://osv.dev/vulnerability/GHSA-m5j3-4634-c2vq","https://github.com/TomWright/dasel/security/advisories/GHSA-m5j3-4634-c2vq","https://github.com/TomWright/dasel"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-m5j3-4634-c2vq","url":"https://osv.dev/vulnerability/GHSA-m5j3-4634-c2vq"}],"summary":"Dasel: Index-out-of-range panic in dasel selector lexer on trailing backslash in quoted string"}