VDB
Sign up
—

GO-2021-0265

Denial of service via maliciously crafted path in github.com/tidwall/gjson

Quick fix

GO-2021-0265 — github.com/tidwall/gjson: upgrade to the fixed version with the command below.

go get github.com/tidwall/gjson@v1.9.3

Details

A maliciously crafted path can cause Get and other query functions to consume excessive amounts of CPU and time.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/tidwall/gjson
Introduced in: 0Fixed in: 1.9.3
Fixgo get github.com/tidwall/gjson@v1.9.3

References