Go/github.com/buger/jsonparser CVE-2020-35381: high 7.5, EPSS 2.31%

Denial of Service in jsonparser

Action: Upgrade github.com/buger/jsonparser to 1.1.1 or later.

go get github.com/buger/jsonparser@v1.1.1

Affected

Fixed versions

Sources

• osv: GHSA-8vrw-m3j9-j27c
• https://nvd.nist.gov/vuln/detail/CVE-2020-35381
• https://github.com/buger/jsonparser/issues/219
• https://github.com/buger/jsonparser/pull/221
• https://github.com/buger/jsonparser/commit/df3ea76ece10095374fd1c9a22a4fb85a44efc42
• https://github.com/buger/jsonparser
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27EA7OGCELV7QFAGVIHODHWKMKGFVIUZ
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LJO5N7YTDEUSTKYTNA372CE6VHCZJWUG
• https://pkg.go.dev/vuln/GO-2021-0057

CVE-2020-35381 · published 2022-05-25T19:21:53Z · modified 2024-05-20T19:28:16Z · JSON