TI-2026-24814 CVE-2026-32285 · GHSA-6g7g-w4f8-9c9x
Denial of service in github.com/buger/jsonparser
Priority HIGH 72
The Delete function fails to properly validate offsets when processing malformed JSON input.
No Jsonparser Project vulnerabilities are listed in CISA KEV.
3 records
The Delete function fails to properly validate offsets when processing malformed JSON input.
The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service (infinite loop) via a Delete call.
jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a GET call.