Denial of Service in jsonparser

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-35381 · ADVISORY
• buger/jsonparser · WEB
• buger/jsonparser#221 · WEB
• buger/jsonparser commit df3ea76 · WEB
• buger/jsonparser · PACKAGE
• lists.fedoraproject.org/archives/list/[email protected]/message/27EA7OGCELV7QFAGVIHODHWKMKGFVIUZ · WEB
• lists.fedoraproject.org/archives/list/[email protected]/message/LJO5N7YTDEUSTKYTNA372CE6VHCZJWUG · WEB
• pkg.go.dev/vuln/GO-2021-0057 · WEB
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27EA7OGCELV7QFAGVIHODHWKMKGFVIUZ
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LJO5N7YTDEUSTKYTNA372CE6VHCZJWUG

Lỗ hổng khác của github.com/buger/jsonparser

• CVE-2026-32285CAO 7.5The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a r…
• CVE-2020-10675CAO 7.5The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service (infinite loop) via a Delete call.