Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Dasel is a command-line tool and library for querying, modifying, and transforming data structures. Starting in version 3.0.0 and prior to version 3.3.1, Dasel's YAML reader allows an attacker who can supply YAML for processing to trigger extreme CPU and memory consumption. The issue is in the library's own `UnmarshalYAML` implementation, which manually resolves alias nodes by recursively following `yaml.Node.Alias` pointers without any expansion budget, bypassing go-yaml v4's built-in alias expansion limit. Version 3.3.2 contains a patch for the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-24 | 2 | Disclosure1General1 |
| 2026-03-25 | 1 | Disclosure1 |
⚡ New CVE Alert: CVE-2026-33320 📊 Severity: 6.2 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-33320 #CVE-2026-33320 #CVE #Medium #CyberSecurity #InfoSec https://t.co/CZNIvpY9Ef
Post summary
The tweet presents a new CVE with basic severity information and a reference link, without further technical, exploit, or mitigation details.
CVE-2026-33320 Dasel YAML Parsing Vulnerability Causing Excessive Resource Consu... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-33320 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The tweet announces CVE-2026-33320 and links to a vulnerability details page, providing a brief technical description but no PoC, exploit code, or patch information.
CVE-2026-33320 Dasel is a command-line tool and library for querying, modifying, and transforming data structures. Starting in version 3.0.0 and prior to version 3.3.1, Dasel's YAML… https://www.cve.org/CVERecord?id=CVE-2026-33320
Post summary
The text references CVE-2026-33320 for Dasel but only notes affected versions, with no technical details, PoC, exploit, or mitigation information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | tomwright | dasel | - | go | - |