anacrolix torrent has unbounded recursion in the bencode decoder that causes stack-overflow crash and CPU-exhaustion DoS in github.com/anacrolix/torrent

GHSA-2wrx-84qj-4pcg · GO-2026-6894 · Published 05/11/2026 · updated 05/11/2026

In breve

GO-2026-6894 è una vulnerabilità non ancora valutata che riguarda github.com/anacrolix/torrent.
Correzione: aggiornare a 1.61.1-0.20260911233437-76452a2c8a2f o successiva.

Package	Affected versions	Patched versions
github.com/anacrolix/torrent Go	`< 1.61.1-0.20260911233437-76452a2c8a2f`	`1.61.1-0.20260911233437-76452a2c8a2f`

Description

anacrolix torrent has unbounded recursion in the bencode decoder that causes stack-overflow crash and CPU-exhaustion DoS in github.com/anacrolix/torrent

References

anacrolix/torrent security advisory · ADVISORY
anacrolix/torrent commit 76452a2 · FIX

Altre vulnerabilità di github.com/anacrolix/torrent

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free