Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
Gjson ProjectGjson

4 matches found

CVE
CVE•added 2021/10/22 5:22 p.m.•93 views

CVE-2021-42836

CVE-2021-42836 affects the GJSON library. The vulnerability is a ReDoS (regular expression denial of service) in GJSON before 1.9.3, triggered by crafted JSON input. The provided documents confirm the issue and reference the upstream fix path: upgrading from 1.9.2 to 1.9.3 or later. No exploit de...

7.5CVSS7.3AI score0.02246EPSS
CVE
CVE•added 2021/01/05 8:41 p.m.•79 views

CVE-2020-36066

The CVE-2020-36066 issue affects the Go package tidwall/gjson (versions earlier than 1.6.5). The vulnerability is a remote denial of service caused by processing a specially crafted JSON input, as described in the connected OSV/GHSA entries. No exploit details are provided in the documents, and t...

7.5CVSS7.2AI score0.0182EPSS
CVE
CVE•added 2020/12/15 8:12 p.m.•73 views

CVE-2020-35380

GJSON (tidwall/gjson) vulnerable to denial of service due to crafted JSON; root cause is improper bounds checking leading to a panic. Affected versions are before 1.6.4; patch is to upgrade to 1.6.4 or newer. Impact is DoS (service disruption) without explicit remote code execution details in the...

7.5CVSS7.2AI score0.01662EPSS
CVE
CVE•added 2021/01/05 8:41 p.m.•67 views

CVE-2020-36067

CVE-2020-36067 affects the GJSON package (tidwall/gjson), where versions

7.5CVSS7.1AI score0.01387EPSS