79 matches found
GHSA-W942-GW6M-P62C Denial of service in GJSON
GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON. Due to improper bounds checking, maliciously crafted JSON objects can cause an out-of-bounds panic. If parsing user input, this may be used as a denial of service vector...
GHSA-WJM3-FQ3R-5X46 github.com/tidwall/gjson is vulnerable to Denial of service
GJSON 1.6.5 allows attackers to cause a denial of service remote via crafted JSON...
GO-2021-0059 Panic due to improper input validation in Get in github.com/tidwall/gjson
Due to improper bounds checking, maliciously crafted JSON objects can cause an out-of-bounds panic. If parsing user input, this may be used as a denial of service vector...
GJSON Denial of Service Vulnerability
GJSON is a Go package that provides a fast and easy way to get values from json documents. A denial of service vulnerability exists in GJSON 1.6.5 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service via a specially crafted GET call...
DEBIAN-CVE-2020-36067
GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call...
CVE-2020-36067
GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call...
CVE-2020-36067
GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call...
CVE-2020-36066
GJSON 1.6.5 allows attackers to cause a denial of service remote via crafted JSON...
DEBIAN-CVE-2020-36066
GJSON 1.6.5 allows attackers to cause a denial of service remote via crafted JSON...
CVE-2020-36066
GJSON 1.6.5 allows attackers to cause a denial of service remote via crafted JSON...
UBUNTU-CVE-2020-36066
GJSON 1.6.5 allows attackers to cause a denial of service remote via crafted JSON...
CVE-2020-36067
GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call...
CVE-2020-36066
GJSON 1.6.5 allows attackers to cause a denial of service remote via crafted JSON...
UBUNTU-CVE-2020-36067
GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call...
Design/Logic Flaw
GJSON 1.6.5 allows attackers to cause a denial of service remote via crafted JSON...
Out-of-bounds
GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call...
CVE-2020-36067
GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call...
CVE-2020-36066
GJSON 1.6.5 allows attackers to cause a denial of service remote via crafted JSON...
CVE-2020-36066
GJSON 1.6.5 allows attackers to cause a denial of service remote via crafted JSON...
CVE-2020-36066
The CVE-2020-36066 issue affects the Go package tidwall/gjson (versions earlier than 1.6.5). The vulnerability is a remote denial of service caused by processing a specially crafted JSON input, as described in the connected OSV/GHSA entries. No exploit details are provided in the documents, and t...