packages:
  - module: github.com/tidwall/gjson
    symbols:
      - match.Match
    versions:
      - fixed: 1.9.3
description: |
    GJSON allowed a ReDoS (regular expression denial of service) attack.
published: 2022-01-14T17:30:24Z
cves:
  - CVE-2021-42836
ghsas:
  - GHSA-ppj4-34rq-v8j9
links:
    commit: https://github.com/tidwall/gjson/commit/590010fdac311cc8990ef5c97448d4fec8f29944
    context:
      - https://github.com/tidwall/gjson/compare/v1.9.2...v1.9.3
      - https://github.com/tidwall/gjson/issues/236
      - https://github.com/tidwall/gjson/issues/237