Regular Expression Denial of Service
GJSON <= 1.9.2 allows attackers to cause a redos via crafted JSON input.
Advisories for Golang/Github.com/Tidwall/Gjson package
2022
2021
Incorrect Comparison
GJSON allows a ReDoS (regular expression denial of service) attack.
Improper Validation of Array Index
GJSON allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call.
Denial of Service
GJSON allows attackers to cause a denial of service (remote) via crafted JSON.
2020
Denial of Service
GJSON allows attackers to cause a denial of service via crafted JSON.