PatchTheCVE: gjsonhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2021-42836: GJSON before 1.9.3 allows a ReDoS (regular expression denial of service) attack.https://patchthecve.com/cve/CVE-2021-42836.htmlhttps://patchthecve.com/cve/CVE-2021-42836.htmlWed, 17 Jun 2026 04:10:11 +0000HIGH 7.5: GJSON before 1.9.3 allows a ReDoS (regular expression denial of service) attack.CVE-2020-36067: GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range)https://patchthecve.com/cve/CVE-2020-36067.htmlhttps://patchthecve.com/cve/CVE-2020-36067.htmlWed, 17 Jun 2026 03:14:45 +0000HIGH 7.5: GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call.CVE-2020-36066: GJSON <1.6.5 allows attackers to cause a denial of service (remote) via crafted JSON.https://patchthecve.com/cve/CVE-2020-36066.htmlhttps://patchthecve.com/cve/CVE-2020-36066.htmlWed, 17 Jun 2026 03:14:45 +0000HIGH 7.5: GJSON <1.6.5 allows attackers to cause a denial of service (remote) via crafted JSON.CVE-2020-35380: GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON.https://patchthecve.com/cve/CVE-2020-35380.htmlhttps://patchthecve.com/cve/CVE-2020-35380.htmlWed, 17 Jun 2026 03:13:41 +0000HIGH 7.5: GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON.