Gjson Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Gjson Project records in CISA KEV

No Gjson Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2021-19000 CVE-2021-42836 · GHSA-ppj4-34rq-v8j9

LOW 37

GJSON before 1.9.3 allows a ReDoS (regular expression denial of service) attack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02415 Published 2021-10-22 Fixed in 1.9.3 CWE-400

TI-2020-18435 CVE-2020-36066 · GHSA-wjm3-fq3r-5x46

LOW 37

GJSON <1.6.5 allows attackers to cause a denial of service (remote) via crafted JSON.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01843 Published 2021-01-05 Fixed in 1.6.5 CWE-400

TI-2020-18436 CVE-2020-36067 · GHSA-p64j-r5f4-pwwx

LOW 36

GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01445 Published 2021-01-05 Fixed in 1.6.6 CWE-129

TI-2020-17961 CVE-2020-35380 · GHSA-w942-gw6m-p62c

LOW 36

GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01463 Published 2020-12-15 Fixed in 1.6.4 CWE-400