Go/github.com/tidwall/gjson CVE-2020-35380: high 7.5, EPSS 1.69%
Denial of service in GJSON
Action: Upgrade github.com/tidwall/gjson to 1.6.4 or later.
go get github.com/tidwall/gjson@v1.6.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.4 | - |
Fixed versions
| 1.6.4 |
Sources
- osv: GHSA-w942-gw6m-p62c
- https://nvd.nist.gov/vuln/detail/CVE-2020-35380
- https://github.com/tidwall/gjson/issues/192
- https://github.com/tidwall/gjson/commit/f0ee9ebde4b619767ae4ac03e8e42addb530f6bc
- https://github.com/tidwall/gjson
- https://pkg.go.dev/vuln/GO-2021-0059
CVE-2020-35380 · published · modified · JSON