module: github.com/tidwall/gjson
versions:
- fixed: v1.9.3
description: |
  GJSON allowed a ReDoS (regular expression denial of service) attack.
cves:
- CVE-2021-42836
symbols:
- match.Match
links:
  commit: https://github.com/tidwall/gjson/commit/590010fdac311cc8990ef5c97448d4fec8f29944
  context:
  - https://github.com/tidwall/gjson/compare/v1.9.2...v1.9.3
  - https://github.com/tidwall/gjson/issues/236
  - https://github.com/tidwall/gjson/issues/237