Infinite Loop in jsonparser

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-10675 · ADVISORY
• buger/jsonparser · WEB
• buger/jsonparser#192 · WEB
• buger/jsonparser commit 91ac968 · WEB
• buger/jsonparser · PACKAGE
• lists.fedoraproject.org/archives/list/[email protected]/message/4C7PV6KEUUM76V4B2J5IFN2U6LEOWB67 · WEB
• lists.fedoraproject.org/archives/list/[email protected]/message/6KUHKDQSEYJNROA66OMN6AAQMGAAN6WI · WEB
• pkg.go.dev/vuln/GO-2021-0089 · WEB
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4C7PV6KEUUM76V4B2J5IFN2U6LEOWB67
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6KUHKDQSEYJNROA66OMN6AAQMGAAN6WI

Lỗ hổng khác của github.com/buger/jsonparser

• CVE-2026-32285CAO 7.5The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a r…
• CVE-2020-35381CAO 7.5jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a GET call.