IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
7.5High

CVE-2026-32285Denial of service in github.com/buger/jsonparser

github.com/buger/jsonparser github.com/buger/jsonparser; Red Hat Cluster Observability Operator 1.5.0; Red Hat Logging Subsystem for Red Hat OpenShift 6.4; Red… Published: (7 months ago)

Description

The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.

Weakness (CWE): CWE-125CWE-1285CWE-129

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
acm 2.14 —
acm 2.15 —
cluster observability operator 1.5 —
github.com/buger/jsonparser github.com/buger/jsonparser < 1.1.2
jsonparser project jsonparser < 1.1.2
logging 6.4 —
multicluster engine 2.10 —
multicluster engine 2.8 —
multicluster globalhub 1.3 —
multicluster globalhub 1.4 —
multicluster globalhub 1.5 —
multicluster globalhub 1.6 —
openshift distributed tracing 3.9 —
Red Hat Cluster Observability Operator 1.5.0 all versions
Red Hat Logging Subsystem for Red Hat OpenShift all versions
Red Hat Logging Subsystem for Red Hat OpenShift 6.4 all versions
Red Hat multicluster engine for Kubernetes 2.1 all versions
Red Hat multicluster engine for Kubernetes 2.8 all versions
Red Hat Multicluster Global Hub 1.3.4 all versions
Red Hat Multicluster Global Hub 1.4.5 all versions
Red Hat Multicluster Global Hub 1.6.5 all versions
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 all versions
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15 all versions
Red Hat Red Hat Ansible Automation Platform 2 —
Red Hat Red Hat Hardened Images all versions
Red Hat Red Hat multicluster global hub 1.5.3 all versions
Red Hat Red Hat OpenShift Container Platform 4 —
Red Hat Red Hat OpenShift distributed tracing 3.9.3 all versions
Red Hat Red Hat OpenShift for Windows Containers —
Red Hat Red Hat OpenShift GitOps all versions
Red Hat Red Hat OpenStack Platform 18.0 —

References and patches

CPE matches (NVD) (1)
  • cpe:2.3:a:jsonparser_project:jsonparser:*:*:*:*:*:*:*:* < 1.1.2