CVE-2026-32285

HIGH 7.5

Denial of service in github.com/buger/jsonparser

CVSS Score

7.5

EPSS Score

0.8%

EPSS Percentile

51th

The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.

Vendor	github.com/buger/jsonparser
Product	github.com/buger/jsonparser
Published	Mar 26, 2026
Last Updated	Jul 23, 2026

Stay Ahead of the Next One

Get instant alerts for github.com/buger/jsonparser github.com/buger/jsonparser

Be the first to know when new high vulnerabilities affecting github.com/buger/jsonparser github.com/buger/jsonparser are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

github.com/buger/jsonparser / github.com/buger/jsonparser

0 < 1.1.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/buger/jsonparser/issues/275 github.com: https://github.com/golang/vulndb/issues/4514 pkg.go.dev: https://pkg.go.dev/vuln/GO-2026-4514 securityinfinity.com: https://securityinfinity.com/research/buger-jsonparser-negative-slice-panic-dos-2026 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-32285 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2451846 security.access.redhat.com: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32285.json access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34364 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22423 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22347 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21769 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23345 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36882 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:13548 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:7191 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:35111 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:9385 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19099 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:17121 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:17123