VYPR

json-glib

by GNOME Foundation

CVEs (1)

  • CVE-2026-120194HigOct 31, 2026
    risk 0.49cvss 7.5epss —

    A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a…