CVE-2020-36067 PUBLISHED

GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call.

EPSS 0.47% · 64.3th percentile

Risk Scores

EPSS Score
0.47%
64.3th percentile

Affected Products

VendorProductVersions
Ubuntu:20.04:LTSgolang-github-tidwall-gjson0, 1.1.5-2
Ubuntu:22.04:LTSgolang-github-tidwall-gjson0, 1.6.7-1
Ubuntu:25.10golang-github-tidwall-gjson1.17.1-1, 0
Ubuntu:24.04:LTSgolang-github-tidwall-gjson1.17.1-1, 0, 1.14.4-2

Timeline

References

Open in Interactive Console →