Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS04dnJ3LW0zajktajI3Y84AArM6
Denial of Service in jsonparser
jsonparser before 1.1.1 allows attackers to cause a denial of service via a GET call.
Permalink: https://github.com/advisories/GHSA-8vrw-m3j9-j27cJSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04dnJ3LW0zajktajI3Y84AArM6
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: almost 2 years ago
Updated: about 1 year ago
CVSS Score: 7.5
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Identifiers: GHSA-8vrw-m3j9-j27c, CVE-2020-35381
References:
- https://nvd.nist.gov/vuln/detail/CVE-2020-35381
- https://github.com/buger/jsonparser/issues/219
- https://github.com/buger/jsonparser/pull/221
- https://github.com/buger/jsonparser/commit/df3ea76ece10095374fd1c9a22a4fb85a44efc42
- https://lists.fedoraproject.org/archives/list/[email protected]/message/27EA7OGCELV7QFAGVIHODHWKMKGFVIUZ/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/LJO5N7YTDEUSTKYTNA372CE6VHCZJWUG/
- https://pkg.go.dev/vuln/GO-2021-0057
- https://github.com/advisories/GHSA-8vrw-m3j9-j27c
Blast Radius: 32.6
Affected Packages
go:github.com/buger/jsonparser
Dependent packages: 2,666Dependent repositories: 22,092
Downloads:
Affected Version Ranges: < 1.1.1
Fixed in: 1.1.1
All affected versions: 1.0.0, 1.1.0
All unaffected versions: 1.1.1