diff --git a/reports/GO-2021-0265.yaml b/reports/GO-2021-0265.yaml
new file mode 100644
index 0000000..4ac4ac1
--- /dev/null
+++ b/reports/GO-2021-0265.yaml
@@ -0,0 +1,15 @@
+module: github.com/tidwall/gjson
+versions:
+- fixed: v1.9.3
+description: |
+  GJSON allowed a ReDoS (regular expression denial of service) attack.
+cves:
+- CVE-2021-42836
+symbols:
+- match.Match
+links:
+  commit: https://github.com/tidwall/gjson/commit/590010fdac311cc8990ef5c97448d4fec8f29944
+  context:
+  - https://github.com/tidwall/gjson/compare/v1.9.2...v1.9.3
+  - https://github.com/tidwall/gjson/issues/236
+  - https://github.com/tidwall/gjson/issues/237