[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpw8syeiFHDMQpw-hItkG5fEV6-60vk68fjSQx2FZEPA":3,"g5a-risk:CVE-2022-28131":136},{"success":4,"data":5,"meta":133},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":26,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":48,"references":49,"referencesCount":68,"weaknesses":69,"weaknessesCount":78,"isActivelyExploited":79,"cisaInfo":26,"otxData":26,"relatedBlogPosts":80,"seoMetadata":81,"configurations":106,"relatedVendorCves":131,"notableEvents":132},"CVE-2022-28131","What is CVE-2022-28131?","Uncontrolled recursion in Decoder.Skip in encoding\u002Fxml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deeply nested XML document.","Uncontrolled recursion in Decoder.Skip in encoding\u002Fxml before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a deep...","2022-08-10T20:15:32.767","2023-11-07T03:45:33.993",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,0.02418,[29,29,29,29,29,29,29],"High",[33,38,43],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"golang","go","*","cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"fedoraproject","fedora","35","cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"netapp","cloud_insights_telegraf","-","cpe:2.3:a:netapp:cloud_insights_telegraf:-:*:*:*:*:*:*:*",3,[50,54,57,61,65],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fgo.dev\u002Fcl\u002F417062","Go",[],{"url":55,"source":52,"tags":56},"https:\u002F\u002Fgo.dev\u002Fissue\u002F53614",[],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fgo.googlesource.com\u002Fgo\u002F+\u002F08c46ed43d80bbb67cb904944ea3417989be4af3","Googlesource",[],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fgroups.google.com\u002Fg\u002Fgolang-announce\u002Fc\u002Fnqrv9fbR0zE","Google",[],{"url":66,"source":52,"tags":67},"https:\u002F\u002Fpkg.go.dev\u002Fvuln\u002FGO-2022-0521",[],5,[70],{"id":71,"name":72,"description":73,"extendedDescription":74,"status":75,"abstraction":76,"structure":77},"CWE-674","Uncontrolled Recursion","The product does not properly control the amount of recursion that takes place,  consuming excessive resources, such as allocated memory or the program stack.","","Draft","Class","Simple",1,false,[],{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2022-28131? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-28131, a high severity cyber security vulnerability from 2022. Uncontrolled recursion in Decoder.Skip in encoding\u002Fxml befo...","CVE-2022-28131, CVE-2022-28131 vulnerability, CVE-2022-28131 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, golang security, fedoraproject security, netapp security, go vulnerability, fedora vulnerability, cloud_insights_telegraf vulnerability","\u002Fwhat-is\u002Fcve-2022-28131",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":10,"dateModified":11,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-28131","Cybersecurity","CVE-2022-28131, CVE-2022-28131 vulnerability, CVE-2022-28131 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107,119,125],{"Operator":26,"Negate":26,"Nodes":108},[109],{"Operator":110,"Negate":26,"CPEMatch":111},"OR",[112,115],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":113,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":114,"VersionEndIncluding":26},"646881F6-A299-4D92-A1F3-E95959FA426F","1.17.12",{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":116,"VersionStartExcluding":26,"VersionStartIncluding":117,"VersionEndExcluding":118,"VersionEndIncluding":26},"FE088A2D-7894-4A48-887C-36DD727A7BEB","1.18.0","1.18.4",{"Operator":26,"Negate":26,"Nodes":120},[121],{"Operator":110,"Negate":26,"CPEMatch":122},[123],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":124,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"80E516C0-98A4-4ADE-B69F-66A772E2BAAA",{"Operator":26,"Negate":26,"Nodes":126},[127],{"Operator":110,"Negate":26,"CPEMatch":128},[129],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":130,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F7E26C3B-E416-49D6-B296-33CD93694D39",[],[],{"lastModified":11,"cacheTime":134,"version":135},1792349616084,"2.0",{"score":137,"band":138,"action":139,"scoredAt":140},48,"Medium","Plan remediation","2026-10-16T06:55:21.622564+00:00"]