AZL-78970
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-78970.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-78970
- Upstream
- Published
- 2024-09-06T21:15:12Z
- Modified
- 2026-04-01T05:23:19.870437Z
- Summary
- CVE-2024-34156 affecting package golang 1.25.7-1
- Details
-
Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.
- References