CVE-2026-58207: Naive Pagination Bounds Check Overflow

Adding pagination offset and limit directly without bounds or integer overflow checks can wrap around to a negative number. This bypasses naive upper-bounds checking and can cause out-of-bounds panics if used to slice an array. Clamp offset and limit values safely before addition.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Go
greprules fetch cve-2026-58207-naive-pagination-bounds-check-overflow --engine opengrep

Description

Adding pagination offset and limit directly without bounds or integer overflow checks can wrap around to a negative number. This bypasses naive upper-bounds checking and can cause out-of-bounds panics if used to slice an array. Clamp offset and limit values safely before addition.