azure linux json-glib vulnerabilities

Latest azure linux json-glib CVEs

Newest publication first

1. CVE-2026-120194 Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step

   Published 2026-10-31

   High·CVSS 7.5 EPSS 0.48%

   A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a deni...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.