Package · Ubuntu

golang-github-tidwall-gjson

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

Unscored —

CVE-2021-42836

GJSON before 1.9.3 allows a ReDoS (regular expression denial of service) attack.

golang-github-tidwall-gjson golang-github-tidwall-gjson Debian Ubuntu

Oct 22, 2021
High 7.5

CVE-2020-36066

github.com/tidwall/gjson is vulnerable to Denial of service

GJSON <1.6.5 allows attackers to cause a denial of service (remote) via crafted JSON.

golang-github-tidwall-gjson golang-github-tidwall-gjson github.com/tidwall/gjson Debian Ubuntu Go

Jan 5, 2021
High 7.5

CVE-2020-36067

Improper Validation of Array Index in GJSON

GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call.

github.com/tidwall/gjson golang-github-tidwall-gjson golang-github-tidwall-gjson Debian Ubuntu Go

Jan 5, 2021
High 7.5

CVE-2020-35380

Denial of service in GJSON

GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON.

github.com/tidwall/gjson golang-github-tidwall-gjson golang-github-tidwall-gjson Debian Ubuntu Go

Dec 15, 2020