← Database

CVE-2026-32287

HIGH CVSS: 7.5 Published: 2026-03-26 Modified: 2026-06-17

Description

Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true()".

Affected Platforms

Antchfx Xpath

Weakness Type

CWE-835

References