| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/tidwall/gjson | < 1.6.6 | 1.6.6 |
| gjson | ≤ 1.6.5 |
GJSON < 1.6.6 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free