What’s Vulnerable › Products

TomWright dasel vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your TomWright dasel version is affected

Latest TomWright dasel vulnerabilities

• CVE-2026-62866 — Dasel: Selector lexer panics on trailing whitespace in `parseCurRune` (CVSS 6.2)
• CVE-2026-59168 — Dasel: Unbounded recursion in JSON and XML readers causes unrecoverable stack-overflow DoS (CVSS 6.2)
• CVE-2026-46378 — Dasel: Denial of service in dasel selector lexer due to infinite loop on unterminated regex literal (CVSS 6.2)
• CVE-2026-46377 — Dasel: Index-out-of-range panic in dasel selector lexer on trailing backslash in quoted string (CVSS 6.2)
• CVE-2026-33320 — Dasel has unbounded YAML alias expansion in dasel leads to CPU/memory denial of service (CVSS 6.2)