92 matches found
GHSA-6G7G-W4F8-9C9X github.com/buger/jsonparser has a denial of service vulnerability
The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack...
Uncaught Exception
Overview github.com/buger/jsonparser is an Alternative JSON parser for Go. Affected versions of this package are vulnerable to Uncaught Exception via the Delete function when processing malformed JSON input. An attacker can cause a runtime panic and disrupt service availability by submitting...
GO-2026-4514 Denial of service in github.com/buger/jsonparser
The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack...
EUVD-2021-1184
Malware in sbrugna...
EUVD-2022-3245
Malicious code in bioql PyPI...
EUVD-2022-4344
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2020-10675
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service infinite loop via a Delete call. CVE-2020-10675 Note that...
Linux Distros Unpatched Vulnerability : CVE-2020-35381
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jsonparser 1.0.0 allows attackers to cause a denial of service panic: runtime error: slice bounds out of range via a GET call. CVE-2020-35381 Note that Nessus...
CVE-2013-3300
The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a less than character...
PT-2025-5776
Name of the Vulnerable Software and Affected Versions: Netplex Json-smart versions 2.5.0 through 2.5.1 Confluence Data Center and Server versions prior to 8.5.22 Confluence Data Center and Server versions prior to 9.2.4 Confluence Data Center and Server versions prior to 9.4.1 Bamboo Data Center...
jsonparser:fuzzobjecteach: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=4510218057744384 Project: jsonparser Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjecteach Job Type: libfuzzerasanjsonparser Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN...
OSV-2023-1300 Security exception in com.fasterxml.jackson.core.JsonParser.currentName
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65024 Crash type: Security exception Crash state: com.fasterxml.jackson.core.JsonParser.currentName com.fasterxml.jackson.dataformat.yaml.YAMLParser.currentName com.fasterxml.jackson.dataformat.yaml.YAMLParser.getCurrentName...
g-http-java-client:JsonObjectParserFuzzer: Security exception in com.google.api.client.json.JsonParser.parseArray
Detailed Report: https://oss-fuzz.com/testcase?key=4942512319758336 Project: g-http-java-client Fuzzing Engine: libFuzzer Fuzz Target: JsonObjectParserFuzzer Job Type: libfuzzerasang-http-java-client Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
g-auth-library-java:TokenVerifierFuzzer: Security exception in com.google.api.client.json.JsonParser.parseArray
Detailed Report: https://oss-fuzz.com/testcase?key=6683973465800704 Project: g-auth-library-java Fuzzing Engine: libFuzzer Fuzz Target: TokenVerifierFuzzer Job Type: libfuzzerasang-auth-library-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
g-http-java-client:JsonObjectParserFuzzer: Security exception in com.google.api.client.json.JsonParser.parseArray
Detailed Report: https://oss-fuzz.com/testcase?key=4782241778368512 Project: g-http-java-client Fuzzing Engine: libFuzzer Fuzz Target: JsonObjectParserFuzzer Job Type: libfuzzerasang-http-java-client Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
[SECURITY] Fedora 38 Update: R-jsonlite-1.8.5-2.fc38
A reasonably fast JSON parser and generator, optimized for statistical data a nd the web. Offers simple, flexible tools for working with JSON in R, and is particularly powerful for building pipelines and interacting with a web API. The implementation is based on the mapping described in the...
g-http-java-client:JsonObjectParserFuzzer: Security exception in com.google.api.client.json.JsonParser.parseArray
Detailed Report: https://oss-fuzz.com/testcase?key=4744318480154624 Project: g-http-java-client Fuzzing Engine: libFuzzer Fuzz Target: JsonObjectParserFuzzer Job Type: libfuzzerasang-http-java-client Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...
Denial Of Service (DoS)
spray-json is vulnerable to denial of service. The vulnerability exists due to the uncontrolled recursion used in the JsonParser in the parseJsValue function of JsonParser.scala, allowing an attacker to crash the application by providing a deeply nested JSON object...
