{"action":"Upgrade github.com/buger/jsonparser to 1.0.0 or later.","affected":[{"fixed":"1.0.0","introduced":"0"}],"component":"github.com/buger/jsonparser","cve_ids":["CVE-2020-10675"],"ecosystem":"Go","epss":0.02584,"exploited":false,"fixed_versions":["1.0.0"],"ghsa_id":"GHSA-rmh2-65xw-9m6q","id":"tcs_01M5KFMXXV2HV3S2CJ8SX6J3PQ","modified_at":"2024-05-20T19:47:11Z","published_at":"2021-05-18T18:26:25Z","references":["https://osv.dev/vulnerability/GHSA-rmh2-65xw-9m6q","https://nvd.nist.gov/vuln/detail/CVE-2020-10675","https://github.com/buger/jsonparser/issues/188","https://github.com/buger/jsonparser/pull/192","https://github.com/buger/jsonparser/commit/91ac96899e492584984ded0c8f9a08f10b473717","https://github.com/buger/jsonparser","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4C7PV6KEUUM76V4B2J5IFN2U6LEOWB67","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6KUHKDQSEYJNROA66OMN6AAQMGAAN6WI","https://pkg.go.dev/vuln/GO-2021-0089"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rmh2-65xw-9m6q","url":"https://osv.dev/vulnerability/GHSA-rmh2-65xw-9m6q"}],"summary":"Infinite Loop in jsonparser"}