module: github.com/buger/jsonparser
versions:
  - fixed: v0.0.0-20200321185410-91ac96899e49
description: |
  Parsing malformed JSON which contain opening brackets, but not closing brackets,
  leads to an infinite loop. If operating on untrusted user input this can be
  used as a denial of service vector.
cves:
  - CVE-2020-10675
credit: Cong Wang
symbols:
  - findKeyStart
links:
  pr: https://github.com/buger/jsonparser/pull/192
  commit: https://github.com/buger/jsonparser/commit/91ac96899e492584984ded0c8f9a08f10b473717
  context:
    - https://github.com/buger/jsonparser/issues/188