This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-35381 →

DEBIAN-CVE-2020-35381

jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a GET call.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Debian:12 golang-github-buger-jsonparser

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1"}]}]

Debian:13 golang-github-buger-jsonparser

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1"}]}]

Debian:14 golang-github-buger-jsonparser

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1"}]}]