buger github.com/buger/jsonparser vulnerabilities

Latest buger github.com/buger/jsonparser CVEs

Newest publication first

1. CVE-2026-32285 Denial of service in github.com/buger/jsonparser

   Published 2026-03-26

   High·CVSS 7.5

   The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.

2. CVE-2020-35381 Denial of Service in jsonparser

   Published 2020-12-15

   High·CVSS 7.5

   jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a GET call.

3. CVE-2020-10675 Infinite Loop in jsonparser

   Published 2020-03-19

   High·CVSS 7.5

   The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service (infinite loop) via a Delete call.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.