Executive brief
Denial of service via maliciously crafted path in github.com/tidwall/gjson
Affected products
- Go github.com/tidwall/gjson
CVE identifiers
- CVE-2021-42836
- CVE-2021-42248
Junglewise Threat Intelligence
CVE-2021-42836: GO-2021-0265 - Denial of service via maliciously crafted path in github.com/tidwall/gjson
CVE-2021-42836 · Severity: low · CVSS 3.1 · Published 2022-08-15
Technologies: github.com/tidwall/gjson (Go). Vendors: Go.
Related threats
- GO-2022-0957 - Denial of service via maliciously crafted JSON in github.com/tidwall/gjson
- GO-2022-0592 - A maliciously crafted path can cause Get and other query functions to consume excessive amounts of CPU and time.
- GO-2021-0059 - Panic due to improper input validation in Get in github.com/tidwall/gjson
- GO-2021-0054 - Panic due to improper input validation in ForEach in github.com/tidwall/gjson