Vulnerabilities

TI-2026-24814 CVE-2026-32285 · GHSA-6g7g-w4f8-9c9x

Denial of service in github.com/buger/jsonparser

HIGH 72

The Delete function fails to properly validate offsets when processing malformed JSON input.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00779 Published 2026-03-26 Partial fix · 1.1.2 CWE-129

TI-2020-17962 CVE-2020-35381 · GHSA-8vrw-m3j9-j27c

LOW 37

jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a GET call.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02308 Published 2020-12-15 Partial fix · 1.1.1 CWE-125

TI-2020-08581 CVE-2020-10675 · GHSA-rmh2-65xw-9m6q

LOW 38

The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service (infinite loop) via a Delete call.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02584 Published 2020-03-19 Fixed in 1.0.0 CWE-835