github.com/tomwright/dasel/v3
Go5 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/tomwright/dasel/v3page 1 of 1
- CVE-2026-33320MEDIUMCVSS 6.2EG 6.2fixed in 3.3.22026-03-24
Dasel is a command-line tool and library for querying, modifying, and transforming data structures. Starting in version 3.0.0 and prior to version 3.3.1, Dasel's YAML reader allows an attacker who can supply YAML for processing to trigger …
- CVE-2026-46377HIGHCVSS 6.2EG 7.52026-05-19
Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.10.1, the escape sequence handler in (*Tokenizer).parseCurRune in selector/lexer/tokenize.go increments past a trailing …
- CVE-2026-46378MEDIUMCVSS 6.2EG 6.2fixed in 3.10.12026-05-19
Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.10.1, the selector lexer matchRegexPattern closure in (*Tokenizer).parseCurRune in selector/lexer/tokenize.go loops whil…
- CVE-2026-59168MEDIUMCVSS 6.2EG 6.2fixed in 3.11.12026-09-21
Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.11.1, parsing/json/json_reader.go decodeValue, decodeObject, and decodeArray, and parsing/xml/reader.go parseElement, re…
- CVE-2026-62866MEDIUMCVSS 6.2EG 6.2fixed in 3.11.22026-09-21
Dasel is a command-line tool and library for querying, modifying, and transforming data structures. From 3.0.0 until 3.11.2, selector/lexer/tokenize.go parseCurRune advances the input index across trailing whitespace and then reads the sou…
Check whether github.com/tomwright/dasel/v3 is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/tomwright/dasel/v3 CVEs against the assets you own.
Book a Demo →