Skip to content
OpenAdvisories

Package · PyPI

json-repair

1 known vulnerabilities.

1 result · Feed

  • High 7.5

    json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS

    ## Circular JSON Schema `$ref` causes unbounded CPU DoS in `json_repair` ### Summary `SchemaRepairer.resolve_schema()` in `json_repair` follows JSON Schema `$ref` pointers in an unbounded `while` loop without any cycle detection. An attacker who can supply a …