Debian/golang-github-tidwall-gjson: high 7.5
GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call.
Action: Upgrade golang-github-tidwall-gjson to 1.6.7-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.7-1 | - |
Fixed versions
| 1.6.7-1 |
Sources
- osv: DEBIAN-CVE-2020-36067#Debian:13/golang-github-tidwall-gjson
- https://security-tracker.debian.org/tracker/CVE-2020-36067
published · modified · JSON