{"action":"Upgrade github.com/tidwall/gjson to 1.9.3 or later.","affected":[{"fixed":"1.9.3","introduced":"0"}],"component":"github.com/tidwall/gjson","cve_ids":["CVE-2021-42248","CVE-2021-42836"],"ecosystem":"Go","exploited":false,"fixed_versions":["1.9.3"],"ghsa_id":"GHSA-ppj4-34rq-v8j9","id":"tcs_01M5KFHNTWR1HG3SHBP8HZENR9","modified_at":"2024-05-20T20:41:04Z","published_at":"2021-10-25T19:43:15Z","references":["https://osv.dev/vulnerability/GHSA-ppj4-34rq-v8j9","https://nvd.nist.gov/vuln/detail/CVE-2021-42836","https://github.com/tidwall/gjson/issues/236","https://github.com/tidwall/gjson/issues/237","https://github.com/tidwall/gjson/commit/590010fdac311cc8990ef5c97448d4fec8f29944","https://github.com/tidwall/gjson/commit/77a57fda87dca6d0d7d4627d512a630f89a91c96","https://github.com/tidwall/gjson","https://github.com/tidwall/gjson/compare/v1.9.2...v1.9.3","https://pkg.go.dev/vuln/GO-2021-0265"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-ppj4-34rq-v8j9","url":"https://osv.dev/vulnerability/GHSA-ppj4-34rq-v8j9"}],"summary":"github.com/tidwall/gjson Vulnerable to REDoS attack"}