Vulnerability in Go Standard Library Encoding/xml

CVE-2026-56859

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.