← CVE Intelligence

CVE-2026-32285

Denial of service in github.com/buger/jsonparser PUBLISHED

Description (CNA)

The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.

Affected (CNA)

Vendor / productVersions
github.com/buger/jsonparser / github.com/buger/jsonparseraffected 0 before 1.1.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

redhat-SADP

A flaw was found in github.com/buger/jsonparser. The Delete function, when processing malformed JSON input, fails to properly validate offsets. This vulnerability can lead to a negative slice index and a runtime panic, allowing a remote attacker to cause a denial of service (DoS) by providing specially crafted JSON data.