CVE-2022-1962

Published: Aug 9, 2022

Modified: Mar 6, 2026

PUBLISHED

Description

Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply nested types or declarations.

Vendor	Product	Versions
Go standard library	go/parser	affected `0 - < 1.17.12` affected `1.18.0-0 - < 1.18.4`

References

https://go.dev/cl/417063

https://go.googlesource.com/go/+/695be961d57508da5a82217f7415200a11845879

https://go.dev/issue/53616

https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE

https://pkg.go.dev/vuln/GO-2022-0515

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2022-1962

Description

Affected Products

References