Lucene search
+L

82 matches found

Github Security Blog
Github Security Blog
added 2021/06/23 5:53 p.m.55 views

Denial of service in GJSON

GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON. Due to improper bounds checking, maliciously crafted JSON objects can cause an out-of-bounds panic. If parsing user input, this may be used as a denial of service vector...

7.5CVSS7.2AI score0.01662EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2021/06/23 5:53 p.m.19 views

GHSA-W942-GW6M-P62C Denial of service in GJSON

GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON. Due to improper bounds checking, maliciously crafted JSON objects can cause an out-of-bounds panic. If parsing user input, this may be used as a denial of service vector...

7.5CVSS7.2AI score0.01662EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:0 a.m.7 views

The vulnerability of the GJSON library in Aurora Application Software, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the GJSON library used in Avora software applications is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending a specially crafted JSON request...

7.5CVSS7.2AI score0.0182EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:0 a.m.18 views

The vulnerability of the GJSON library in Aurora Application Software, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the GJSON library in Aurora software applications is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially crafted GET request...

7.5CVSS7.2AI score0.01387EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2021/05/18 9:7 p.m.17 views

GHSA-WJM3-FQ3R-5X46 github.com/tidwall/gjson is vulnerable to Denial of service

GJSON 1.6.5 allows attackers to cause a denial of service remote via crafted JSON...

7.5CVSS7.2AI score0.0182EPSS
SaveExploits1References7
OSV
OSV
added 2021/04/14 8:4 p.m.24 views

GO-2021-0059 Panic due to improper input validation in Get in github.com/tidwall/gjson

Due to improper bounds checking, maliciously crafted JSON objects can cause an out-of-bounds panic. If parsing user input, this may be used as a denial of service vector...

7.5CVSS7.3AI score0.01662EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/01/06 12:0 a.m.7 views

GJSON Denial of Service Vulnerability

GJSON is a Go package that provides a fast and easy way to get values from json documents. A denial of service vulnerability exists in GJSON 1.6.5 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service via a specially crafted GET call...

7.5CVSS8.8AI score0.01387EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/05 9:15 p.m.5 views

DEBIAN-CVE-2020-36067

GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call...

7.5CVSS7.5AI score0.01387EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/05 9:15 p.m.18 views

CVE-2020-36067

GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call...

7.5CVSS7.2AI score0.01387EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/05 9:15 p.m.17 views

CVE-2020-36067

GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call...

7.5CVSS6.9AI score
SaveExploits0References1
NVD
NVD
added 2021/01/05 9:15 p.m.24 views

CVE-2020-36066

GJSON 1.6.5 allows attackers to cause a denial of service remote via crafted JSON...

7.5CVSS7.3AI score0.0182EPSS
SaveExploits1References1
OSV
OSV
added 2021/01/05 9:15 p.m.16 views

CVE-2020-36066

GJSON 1.6.5 allows attackers to cause a denial of service remote via crafted JSON...

7.5CVSS7AI score
SaveExploits0References1
OSV
OSV
added 2021/01/05 9:15 p.m.5 views

DEBIAN-CVE-2020-36066

GJSON 1.6.5 allows attackers to cause a denial of service remote via crafted JSON...

7.5CVSS7.5AI score0.0182EPSS
SaveExploits1References1
Prion
Prion
added 2021/01/05 9:15 p.m.10 views

Design/Logic Flaw

GJSON 1.6.5 allows attackers to cause a denial of service remote via crafted JSON...

5CVSS7.2AI score0.0182EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/01/05 9:15 p.m.2 views

CVE-2020-36066

GJSON 1.6.5 allows attackers to cause a denial of service remote via crafted JSON...

7.5CVSS5.3AI score0.0182EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2021/01/05 9:15 p.m.19 views

CVE-2020-36066

GJSON 1.6.5 allows attackers to cause a denial of service remote via crafted JSON...

7.5CVSS7.1AI score0.0182EPSS
SaveExploits1References3
OSV
OSV
added 2021/01/05 9:15 p.m.4 views

UBUNTU-CVE-2020-36067

GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call...

7.5CVSS7.3AI score0.01387EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/01/05 9:15 p.m.4 views

CVE-2020-36067

GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call...

7.5CVSS5.3AI score0.01387EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2021/01/05 9:15 p.m.24 views

CVE-2020-36067

GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call...

7.5CVSS7.1AI score0.01387EPSS
SaveExploits0References3
Prion
Prion
added 2021/01/05 9:15 p.m.17 views

Out-of-bounds

GJSON =v1.6.5 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a crafted GET call...

5CVSS7.1AI score0.01387EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder