4 matches found
GO-2021-0265 Denial of service via maliciously crafted path in github.com/tidwall/gjson
A maliciously crafted path can cause Get and other query functions to consume excessive amounts of CPU and time...
UBUNTU-CVE-2021-42836
GJSON before 1.9.3 allows a ReDoS regular expression denial of service attack...
UBUNTU-CVE-2020-36066
GJSON 1.6.5 allows attackers to cause a denial of service remote via crafted JSON...
PT-2021-3184 · Gjson · Gjson
Name of the Vulnerable Software and Affected Versions: GJSON versions prior to 1.6.5 Description: The issue is related to an uncontrolled resource consumption in the GJSON library, which can be exploited by a remote attacker using a specially crafted JSON request to cause a denial of service. A...