← Back

Jsonparser

jsonparser

Vendor: Jsonparser Project • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-32285
1Jsonparser Project
1Jsonparser
Jul 23, 2026
Mar 26, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.
CVE-2020-35381
2Fedoraproject
Jsonparser Project
2Fedora
Jsonparser
Jun 17, 2026
Dec 15, 2020
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a GET call.
CVE-2020-10675
2Fedoraproject
Jsonparser Project
2Fedora
Jsonparser
Jun 17, 2026
Mar 19, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service (infinite loop) via a Delete call.