CVE-2025-22868

Description

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

Affected Platforms

Weakness Type

CWE-1286

References

• https://go.dev/cl/652155
• https://go.dev/issue/71490
• https://pkg.go.dev/vuln/GO-2025-3488