| module: github.com/evanphx/json-patch | |
| versions: | |
| - fixed: v0.5.2 | |
| description: | | |
| A malicious JSON patch can cause a panic due to an out-of-bounds | |
| write attempt. This can be used as a denial of service vector if | |
| exposed to arbitrary user input. | |
| cves: | |
| - CVE-2018-14632 | |
| symbols: | |
| - partialArray.add | |
| links: | |
| pr: https://github.com/evanphx/json-patch/pull/57 | |
| commit: https://github.com/evanphx/json-patch/commit/4c9aadca8f89e349c999f04e28199e96e81aba03 |