Go/github.com/evanphx/json-patch CVE-2018-14632: unknown, EPSS 2.23%
Out-of-bounds write in github.com/evanphx/json-patch
Action: Upgrade github.com/evanphx/json-patch to 0.5.2 or later.
go get github.com/evanphx/json-patch@v0.5.2go get github.com/evanphx/json-patch@v3.0.1-0.20180525145409-4c9aadca8f89+incompatibleAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.2 | - |
| 3.0.0+incompatible | 3.0.1-0.20180525145409-4c9aadca8f89+incompatible | - |
Fixed versions
| 0.5.2 | 3.0.1-0.20180525145409-4c9aadca8f89+incompatible |
Sources
- osv: GO-2021-0076
- https://github.com/evanphx/json-patch/pull/57
- https://github.com/evanphx/json-patch/commit/4c9aadca8f89e349c999f04e28199e96e81aba03
CVE-2018-14632 · published · modified · JSON