github.com/buger/jsonparser has a denial of service vulnerability

ALTO 7.5CVE-2026-32285 · GHSA-6g7g-w4f8-9c9x · GO-2026-4514 · Published 26/03/2026 · updated 09/09/2026

En resumen

CVE-2026-32285 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a github.com/buger/jsonparser, jsonparser (jsonparser project).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.78%, mayor que el 56.1% de las vulnerabilidades.
Solución: actualizar a 1.1.2 o posterior.

Package	Affected versions	Patched versions
github.com/buger/jsonparser Go	`< 1.1.2`	`1.1.2`
jsonparser jsonparser_project	`< 1.1.2`	`1.1.2`

Description

The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.

NVD description

The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.

References

Más vulnerabilidades de github.com/buger/jsonparser

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free