Lucene search

K
osvGoogleOSV:GO-2021-0089
HistoryApr 14, 2021 - 8:04 p.m.

Infinite loop in github.com/buger/jsonparser

2021-04-1420:04:52
Google
osv.dev
8

0.002 Low

EPSS

Percentile

55.9%

Parsing malformed JSON which contain opening brackets, but not closing brackets, leads to an infinite loop. If operating on untrusted user input this can be used as a denial of service vector.

CPENameOperatorVersion
github.com/buger/jsonparserlt1.0.0