GHSA-ppj4-34rq-v8j9HighCVSS 7.5

github.com/tidwall/gjson Vulnerable to REDoS attack

Published
October 25, 2021
Last Modified
August 30, 2023

🔗 CVE IDs covered (1)

CVE-2021-42836 →

📋 Description

GJSON is a Go package that provides a fast and simple way to get values from a json document. GJSON before 1.9.3 allows a ReDoS (regular expression denial of service) attack.

🎯 Affected products1

  • go/github.com/tidwall/gjson:< 1.9.3

🔗 References (8)