antchfx/xpath

Releases27

Frequency3 months 6 days

Last Release 3 months ago

Stars740

XPath package for golang, supports HTML, XML, JSON document query and more

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2026-32287 ↗	Mar 26, 2026Thursday, 26 March 2026, 20:16	7.5 HIGH	—
Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true()".
CVE-2026-4645 ↗	Mar 23, 2026Monday, 23 March 2026, 14:16	—	—
Rejected reason: Duplicate of CVE-2026-32287