CVE-2020-36066
2 advisories.
Go/github.com/tidwall/gjson CVE-2020-36066: high 7.5, EPSS 1.84%
github.com/tidwall/gjson is vulnerable to Denial of service
Action: Upgrade github.com/tidwall/gjson to 1.6.5 or later.
go get github.com/tidwall/gjson@v1.6.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.5 | - |
Fixed versions
| 1.6.5 |
Sources
- osv: GHSA-wjm3-fq3r-5x46
- https://nvd.nist.gov/vuln/detail/CVE-2020-36066
- https://github.com/tidwall/gjson/issues/195
- https://github.com/tidwall/gjson/issues/195#issuecomment-755303148
- https://github.com/tidwall/gjson/commit/9f58baa7a613f89dfdc764c39e47fd3a15606153
- https://github.com/tidwall/match/commit/c2f534168b739a7ec1821a33839fb2f029f26bbc
- https://github.com/tidwall/gjson
- https://pkg.go.dev/vuln/GO-2022-0957
CVE-2020-36066 · published · modified · JSON
Go/github.com/tidwall/gjson CVE-2020-36066: unknown, EPSS 1.84%
Denial of service via maliciously crafted JSON in github.com/tidwall/gjson
Action: Upgrade github.com/tidwall/gjson to 1.6.5 or later.
go get github.com/tidwall/gjson@v1.6.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.5 | - |
Fixed versions
| 1.6.5 |
Sources
- osv: GO-2022-0957
- https://github.com/tidwall/match/commit/c2f534168b739a7ec1821a33839fb2f029f26bbc
- https://github.com/tidwall/gjson/commit/9f58baa7a613f89dfdc764c39e47fd3a15606153
- https://github.com/tidwall/gjson/issues/195
CVE-2020-36066 · published · modified · JSON