Skip to content
Noroxi

gjson project records

4 published records for vendor gjson project.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 21

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2021-42836
    31Monitor

    GJSON before 1.9.3 allows a ReDoS (regular expression denial of service) attack.

    HighCVSS 7.5No exploitEPSS 2%

    gjson project · gjsonOct 22, 2021

  • CVE-2020-36066
    31Monitor

    GJSON <1.6.5 allows attackers to cause a denial of service (remote) via crafted JSON.

    HighCVSS 7.5No exploitEPSS 1%

    gjson project · gjsonJan 5, 2021

  • CVE-2020-35380
    30Monitor

    GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON.

    HighCVSS 7.5No exploitEPSS 1%

    gjson project · gjsonDec 15, 2020

  • CVE-2020-36067
    30Monitor

    GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call.

    HighCVSS 7.5No exploitEPSS 1%

    gjson project · gjsonJan 5, 2021