72 matches found
Linux Distros Unpatched Vulnerability : CVE-2020-10675
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service infinite loop via a Delete call. CVE-2020-10675 Note that...
Linux Distros Unpatched Vulnerability : CVE-2020-35381
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jsonparser 1.0.0 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a GET call. CVE-2020-35381 Note that Nessus...
CVE-2013-3300
The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a less than character...
PT-2025-5776 · Unknown +2 · Netplex Json-Smart +4
Name of the Vulnerable Software and Affected Versions: Netplex Json-smart versions 2.5.0 through 2.5.1 Confluence Data Center and Server versions prior to 8.5.22 Confluence Data Center and Server versions prior to 9.2.4 Confluence Data Center and Server versions prior to 9.4.1 Bamboo Data Center...
OSV-2023-1300 Security exception in com.fasterxml.jackson.core.JsonParser.currentName
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65024 Crash type: Security exception Crash state: com.fasterxml.jackson.core.JsonParser.currentName com.fasterxml.jackson.dataformat.yaml.YAMLParser.currentName com.fasterxml.jackson.dataformat.yaml.YAMLParser.getCurrentName...
[SECURITY] Fedora 38 Update: R-jsonlite-1.8.5-2.fc38
A reasonably fast JSON parser and generator, optimized for statistical data a nd the web. Offers simple, flexible tools for working with JSON in R, and is particularly powerful for building pipelines and interacting with a web API. The implementation is based on the mapping described in the...
Denial Of Service (DoS)
spray-json is vulnerable to denial of service. The vulnerability exists due to the uncontrolled recursion used in the JsonParser in the parseJsValue function of JsonParser.scala, allowing an attacker to crash the application by providing a deeply nested JSON object...
GHSA-8VRW-M3J9-J27C Denial of Service in jsonparser
jsonparser before 1.1.1 allows attackers to cause a denial of service via a GET call...
Denial of Service in jsonparser
jsonparser before 1.1.1 allows attackers to cause a denial of service via a GET call...
Infinite Loop in jsonparser
The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service infinite loop via a Delete call...
GHSA-RMH2-65XW-9M6Q Infinite Loop in jsonparser
The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service infinite loop via a Delete call...
GO-2021-0089 Infinite loop in github.com/buger/jsonparser
Parsing malformed JSON which contain opening brackets, but not closing brackets, leads to an infinite loop. If operating on untrusted user input this can be used as a denial of service vector...
Fedora 33 : golang-github-buger-jsonparser (2021-5676f1be7d)
The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-5676f1be7d advisory. - jsonparser 1.0.0 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a GET call. CVE-2020-35381 Note...
Fedora 32 : golang-github-buger-jsonparser (2021-b670727349)
The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-b670727349 advisory. - jsonparser 1.0.0 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a GET call. CVE-2020-35381 Note...
[SECURITY] Fedora 33 Update: golang-github-buger-jsonparser-1.1.1-1.fc33
Alternative JSON parser for Go. It does not require you to know the structure of the payload eg. create structs, and allows accessing fields by providing the path to them. It is up to 10 times faster than standard encoding/json package depending on payload s ize and usage, allocates no memory...
[SECURITY] Fedora 32 Update: golang-github-buger-jsonparser-1.1.1-1.fc32
Alternative JSON parser for Go. It does not require you to know the structure of the payload eg. create structs, and allows accessing fields by providing the path to them. It is up to 10 times faster than standard encoding/json package depending on payload s ize and usage, allocates no memory...
Fedora: Security Advisory for golang-github-buger-jsonparser (FEDORA-2021-5676f1be7d)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for golang-github-buger-jsonparser (FEDORA-2021-b670727349)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...