CVE-2021-42836
Summary
| CVE | CVE-2021-42836 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-10-22 18:15:00 UTC |
|---|
| Updated | 2022-05-03 16:04:00 UTC |
|---|
| Description | GJSON before 1.9.3 allows a ReDoS (regular expression denial of service) attack. |
|---|
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|
| Application |
Gjson Project |
Gjson |
All |
All |
All |
All |
References
| Reference | Source | Link | Tags |
|---|
| Limit the complexity of "like" queries that match on a pattern. · tidwall/gjson@77a57fd · GitHub |
MISC |
github.com |
|
| Update match dependency · tidwall/gjson@590010f · GitHub |
MISC |
github.com |
|
| gjson.Get can cause DoS attacks. GJSON <= 1.9.1 allows attackers to cause a redos via crafted JSON input. · Issue #236 · tidwall/gjson · GitHub |
MISC |
github.com |
|
| gjson.Get can cause DoS attacks. GJSON <= 1.9.2 allows attackers to cause a redos via crafted JSON input. · Issue #237 · tidwall/gjson · GitHub |
MISC |
github.com |
|
| Comparing v1.9.2...v1.9.3 · tidwall/gjson · GitHub |
MISC |
github.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 980250 Go (go) Security Update for github.com/tidwall/gjson (GHSA-ppj4-34rq-v8j9)
