CVE-2026-59168 | TomWright Dasel up to 3.11.0 Parsing json_reader.go decodeValue/decodeObject/decodeArray/parseElement stack-based overflow

September 21, 2026 Yanac

A vulnerability was found in TomWright Dasel up to 3.11.0. It has been rated as problematic. Affected by this vulnerability is the function decodeValue/decodeObject/decodeArray/parseElement of the file parsing/json/json_reader.go of the component Parsing. Performing a manipulation results in stack-based buffer overflow.

This vulnerability is reported as CVE-2026-59168. The attack requires a local approach. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More