CVE-2022-30635

CVE-2022-30635 is a high-severity denial-of-service vulnerability affecting Go versions prior to 1.17.12 and 1.18.4. An attacker can remotely trigger uncontrolled recursion in the 'encoding/gob' package's Decoder.Decode function by sending a message with deeply nested structures, leading to stack exhaustion and a panic. With a CVSS score of 7.5, this vulnerability has a low attack complexity but a high impact on availability, causing system crashes. There is currently no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed in CISA's Known Exploited Vulnerabilities catalog.