GO-2026-4526

Affected Products

Timeline

• Mar 17, 2026 CVE Published
• Mar 23, 2026 CVE Updated

References

• https://github.com/antchfx/xpath/issues/121 discussion
• https://github.com/golang/vulndb/issues/4526 discussion
• https://github.com/antchfx/xpath/commit/afd4762cc342af56345a3fb4002a59281fcab494 fix