HIGH7.5

GHSA-p64j-r5f4-pwwx

Improper Validation of Array Index in GJSON

Quick fix

GHSA-p64j-r5f4-pwwx — github.com/tidwall/gjson: upgrade to the fixed version with the command below.

go get github.com/tidwall/gjson@v1.6.6

Details

GJSON < 1.6.6 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call.

Enter the version of the package you're using.

Introduced in: 0Fixed in: 1.6.6

Fixgo get github.com/tidwall/gjson@v1.6.6