Description
Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Go standard library encoding/gob
Default version status: unaffected
0 to < 1.22.7affected1.23.0-0 to < 1.23.1affected