CVE-2020-35380

GJSON (tidwall/gjson) vulnerable to denial of service due to crafted JSON; root cause is improper bounds checking leading to a panic. Affected versions are before 1.6.4; patch is to upgrade to 1.6.4 or newer. Impact is DoS (service disruption) without explicit remote code execution details in the...

CVE-2020-35380

GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON...

CVE-2020-35380

GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON...

CVE-2020-35380: Undefined Security Weakness

GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON...

Tidwall Gjson Input Validation Error Vulnerability

Tidwall Gjson is a Go-based codebase for interacting with data in json format by Tidwall's individual developers. An input validation error vulnerability exists in GJSON before version 1.6.4. The vulnerability stems from a network system or product that does not properly validate input data, and...

CVE-2021-42248

CVE-2021-42248 is a duplicate of CVE-2021-42836. The connected document for CVE-2021-42836 describes a ReDoS vulnerability in the GJSON library (before version 1.9.3) where specially crafted JSON input can trigger a regular expression denial of service. Impact is denial of service; no product/ver...