Go/github.com/tidwall/gjson CVE-2020-36066: unknown, EPSS 1.84%
Denial of service via maliciously crafted JSON in github.com/tidwall/gjson
Action: Upgrade github.com/tidwall/gjson to 1.6.5 or later.
go get github.com/tidwall/gjson@v1.6.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.5 | - |
Fixed versions
| 1.6.5 |
Sources
- osv: GO-2022-0957
- https://github.com/tidwall/match/commit/c2f534168b739a7ec1821a33839fb2f029f26bbc
- https://github.com/tidwall/gjson/commit/9f58baa7a613f89dfdc764c39e47fd3a15606153
- https://github.com/tidwall/gjson/issues/195
CVE-2020-36066 · published · modified · JSON