CVE-2020-36067
2 advisories.
Go/github.com/tidwall/gjson CVE-2020-36067: high 7.5, EPSS 1.40%
Improper Validation of Array Index in GJSON
Action: Upgrade github.com/tidwall/gjson to 1.6.6 or later.
go get github.com/tidwall/gjson@v1.6.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.6 | - |
Fixed versions
| 1.6.6 |
Sources
- osv: GHSA-p64j-r5f4-pwwx
- https://nvd.nist.gov/vuln/detail/CVE-2020-36067
- https://github.com/tidwall/gjson/issues/196
- https://github.com/tidwall/gjson/commit/bf4efcb3c18d1825b2988603dea5909140a5302b
- https://github.com/tidwall/gjson
- https://pkg.go.dev/vuln/GO-2021-0054
CVE-2020-36067 · published · modified · JSON
Go/github.com/tidwall/gjson CVE-2020-36067: unknown, EPSS 1.40%
Panic due to improper input validation in ForEach in github.com/tidwall/gjson
Action: Upgrade github.com/tidwall/gjson to 1.6.6 or later.
go get github.com/tidwall/gjson@v1.6.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.6 | - |
Fixed versions
| 1.6.6 |
Sources
- osv: GO-2021-0054
- https://github.com/tidwall/gjson/commit/bf4efcb3c18d1825b2988603dea5909140a5302b
- https://github.com/tidwall/gjson/issues/196
CVE-2020-36067 · published · modified · JSON