CVE-2026-4645

Name of the Vulnerable Software and Affected Versions github.com/antchfx/xpath (affected versions not specified)

Description A flaw exists in the github.com/antchfx/xpath component that allows a remote attacker to cause a Denial of Service (DoS) condition. This is achieved by submitting crafted Boolean XPath expressions that evaluate to true, triggering an infinite loop within the logicalQuery.Select function. This results in 100% CPU utilization, impacting the affected system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.