Denial of service in github.com/buger/jsonparser
The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.
Advisories for Golang/Github.com/Buger/Jsonparser package
2026
2020
Denial of Service
jsonparser allows attackers to cause a denial of service (runtime panic error slice bounds out of range) via a GET call.
Loop with Unreachable Exit Condition (Infinite Loop)
The Library API in buger jsonparser allows attackers to cause a denial of service (infinite loop) by means of a call to Delete.