blob: caeee996f6479b133669b5777619a8f1cc296ad5 [file] [log] [blame]
module: github.com/buger/jsonparser
versions:
- fixed: v0.0.0-20200321185410-91ac96899e49
description: |
Parsing malformed JSON which contain opening brackets, but not closing brackets,
leads to an infinite loop. If operating on untrusted user input this can be
used as a denial of service vector.
cves:
- CVE-2020-10675
credit: Cong Wang
symbols:
- findKeyStart
links:
pr: https://github.com/buger/jsonparser/pull/192
commit: https://github.com/buger/jsonparser/commit/91ac96899e492584984ded0c8f9a08f10b473717
context:
- https://github.com/buger/jsonparser/issues/188