Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selectors such as "1=1" or "true()".
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
An XPath engine is vulnerable to a DoS via an infinite loop in boolean expressions (CVE-2026-32287). Review XPath usage for #DoS risk and implement validation. #infosec #XPath https://www.pulsepatch.io/posts/cve-2026-32287-xpath-denial-of-service
Post summary
The tweet announces CVE‑2026‑32287, a DoS flaw in XPath engines caused by infinite loops in boolean expressions, and recommends adding input validation as a mitigation.
CVE-2026-32287 Boolean XPath expressions that evaluate to true can cause an infinite loop in http://logicalQuery.Select, leading to 100% CPU usage. This can be triggered by top-level selec… https://www.cve.org/CVERecord?id=CVE-2026-32287
Post summary
The text outlines a vulnerability where Boolean XPath expressions trigger an infinite loop in logicalQuery.Select, leading to full CPU utilization.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | antchfx | xpath | - | go | - |