CVE-2020-36067

GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call

High · published January 5, 2021

CVSS v3.1
7.5
EPSS
1%
Percentile
72.3
In the wild
Unconfirmed
What it is

GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.01404 · 72.3th percentile
Published
2021-01-05T20:41Z
EPSS history
Timeline
  • 05 JAN 20:41Z
    GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call
    cvelistv5