7.5High
Denial of service in github.com/buger/jsonparser
github.com/buger/jsonparser github.com/buger/jsonparser; Red Hat Cluster Observability Operator 1.5.0; Red Hat Logging Subsystem for Red Hat OpenShift 6.4; Red Hat multicluster engine for Kubernetes 2.1
The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.