buger/jsonparser

buger/jsonparser

GitHubGitHub
GitHubgithub.com
Releases5
Frequency1 year 5 months
Last Release
Stars5.63K
One of the fastest alternative JSON parser for Go that does not require schema
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2026-32285NVD↗
< 1.1.27.5 HIGH—

The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.

CVE-2020-35381NVD↗
= 1.0.07.5 HIGH7.8 HIGH

jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a GET call.

CVE-2020-10675NVD↗
= *, < 1.0.07.5 HIGH5 MEDIUM

The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service (infinite loop) via a Delete call.