Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/03/19 12:44 p.m.39 views

Improper handling of null Unicode character when parsing JSON in github.com/modelcontextprotocol/go-sdk

The Go SDK recently transitioned to the segmentio/encoding library for JSON parsing in version 1.3.1. While this change addressed both case-insensitivity and ASCII folding issues, the new parser implemented aggressive key matching that treated keys with null Unicode characters appended at the end...

5.8AI score
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/03/19 12:44 p.m.8 views

GHSA-Q382-VC8Q-7JHJ Improper handling of null Unicode character when parsing JSON in github.com/modelcontextprotocol/go-sdk

The Go SDK recently transitioned to the segmentio/encoding library for JSON parsing in version 1.3.1. While this change addressed both case-insensitivity and ASCII folding issues, the new parser implemented aggressive key matching that treated keys with null Unicode characters appended at the end...

8.2CVSS5.8AI score
SaveExploits0References4
Rows per page
Query Builder