CVE-2020-10675

CVE-2020-10675 affects the Go library github.com/buger/jsonparser: the Library API could enter an infinite loop on certain Delete calls, causing a denial-of-service. Root cause: parsing malformed or crafted input triggering unbounded looping. Documented in multiple advisories (OSV GHSA, GHSA-RMH2...

CVE-2026-32285

The github.com/buger/jsonparser library contains a vulnerability where the Delete function fails to properly validate offsets when processing malformed JSON input. This flaw can lead to a negative slice index and a runtime panic , resulting in a denial of service (DoS) attack. This issue impacts ...

CVE-2020-35381

CVE-2020-35381 affects github.com/buger/jsonparser v1.0.0, where improper bounds checking can trigger a panic (slice bounds out of range) during JSON parsing via a GET request, leading to denial of service. Related advisories (GHSA-8VRW-M3J9-J27C; OSV GO-2021-0057) confirm a DoS vulnerability wit...