module: github.com/evanphx/json-patch
versions:
  - fixed: v0.5.2
description: |
    A malicious JSON patch can cause a panic due to an out-of-bounds
    write attempt. This can be used as a denial of service vector if
    exposed to arbitrary user input.
cves:
  - CVE-2018-14632
symbols:
  - partialArray.add
links:
    pr: https://github.com/evanphx/json-patch/pull/57
    commit: https://github.com/evanphx/json-patch/commit/4c9aadca8f89e349c999f04e28199e96e81aba03