CVE-2026-4645

HIGH

Github.com/antchfx/xpath: xpath: denial of service via crafted boolean xpath expressions

Title source: cna

Description

Rejected reason: Duplicate of CVE-2026-32287

Scores

CVSS v3 7.5
EPSS 0.0015
EPSS Percentile 35.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-835
Status published
Products (8)
Red Hat/Compliance Operator
Red Hat/File Integrity Operator
Red Hat/Migration Toolkit for Applications 8
Red Hat/Red Hat Advanced Cluster Management for Kubernetes 2
Red Hat/Red Hat Enterprise Linux 10
Red Hat/Red Hat Enterprise Linux 9
Red Hat/Red Hat OpenShift Container Platform 4
Red Hat/Red Hat OpenShift distributed tracing 3
Published Mar 23, 2026
Tracked Since Mar 23, 2026