Skip to main content

Compliance Operator

1 CVEs product

Monthly

CVE-2026-4645 Mar 23, 13:35 HIGH PATCH This Week

The antchfx/xpath component in Debian is vulnerable to denial of service when processing specially crafted Boolean XPath expressions, which trigger an infinite loop in the logicalQuery.Select function consuming 100% CPU resources. Unauthenticated remote attackers can exploit this over the network without user interaction to disable affected systems. No patch is currently available.

Denial Of Service Debian Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 9 Red Hat Openshift Container Platform 4 +7
NVD GitHub VulDB
CVSS 3.1
7.5
EPSS
0.1%
EPSS 0% CVSS 7.5
HIGH PATCH This Week

The antchfx/xpath component in Debian is vulnerable to denial of service when processing specially crafted Boolean XPath expressions, which trigger an infinite loop in the logicalQuery.Select function consuming 100% CPU resources. Unauthenticated remote attackers can exploit this over the network without user interaction to disable affected systems. No patch is currently available.

Denial Of Service Debian Red Hat Enterprise Linux 10 +9
NVD GitHub VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy