CVE-2026-32287 — Infinite loop in github.com/antchfx/xpath
Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such a…
Published: 2026-03-26 · CVSS: 7.5 · CVSS 3.1
Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true()".
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7