CVE-2020-10675

CVE-2020-10675 affects the Go library github.com/buger/jsonparser: the Library API could enter an infinite loop on certain Delete calls, causing a denial-of-service. Root cause: parsing malformed or crafted input triggering unbounded looping. Documented in multiple advisories (OSV GHSA, GHSA-RMH2...

CVE-2020-35381

CVE-2020-35381 affects github.com/buger/jsonparser v1.0.0, where improper bounds checking can trigger a panic (slice bounds out of range) during JSON parsing via a GET request, leading to denial of service. Related advisories (GHSA-8VRW-M3J9-J27C; OSV GO-2021-0057) confirm a DoS vulnerability wit...

CVE-2026-32285

The CVE-2026-32285 vulnerability involves the Delete function failing to validate offsets when processing malformed JSON, which can cause a negative slice index and a runtime panic, enabling a denial-of-service. Connected advisories confirm this CVE with affected packages including rclone and cri...