VYPR

Jsonparser

by Jsonparser Project

Source repositories

CVEs (3)

  • CVE-2026-32285HigMar 26, 2026
    risk 0.42cvss 7.5epss 0.01

    The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.

  • CVE-2020-35381HigDec 15, 2020
    risk 0.42cvss 7.5epss 0.02

    jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a GET call.

  • CVE-2020-10675HigMar 19, 2020
    risk 0.42cvss 7.5epss 0.03

    The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service (infinite loop) via a Delete call.