gjson.Get can cause DoS attacks. GJSON <= 1.9.2 allows attackers to cause a redos via crafted JSON input. #237
Comments
|
Fixed in 77a57fd |
This was referenced Jan 12, 2022
|
@tidwall This is something that would be caught by fuzzing gjson continuously: google/oss-fuzz#6901 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
func main() {
testJson :=
#[%"*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,*,,,,,,""*,*"]gjson.Get(testJson, testJson)
}
The text was updated successfully, but these errors were encountered: