[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-32285":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T23:19:30.300Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":31,"aliases":41,"duplicate_of":9,"upstream":44,"downstream":45,"duplicates":58,"related":59,"reserved_at":9,"published_at":68,"modified_at":69,"state":70,"summary":71,"references_raw":79,"kevs":196,"epss":197,"epss_history":200,"metrics":481,"affected":491},"CVE-2026-32285","The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.",null,[11,24],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-129","Improper Validation of Array Index","The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.","weakness","Draft","Variant","High",[20],{"id":21,"name":22,"techniques":23},"CAPEC-100","Overflow Buffers",[],{"_key":25,"id":25,"name":26,"description":27,"type":15,"status":28,"abstraction":29,"likelihood_of_exploit":9,"capec":30},"CWE-1285","Improper Validation of Specified Index, Position, or Offset in Input","The product receives input that is expected to specify an index, position, or offset into an indexable resource such as a buffer or file, but it does not validate or incorrectly validates that the specified index/position/offset has the required properties.","Incomplete","Base",[],[32],{"_key":33,"name":34,"source":35,"url":36,"maturity":37,"reliability_score":38,"verified":39,"type":9,"platforms":40,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_198D977977E6F07F","Exploit Reference (securityinfinity.com)","reference","https://securityinfinity.com/research/buger-jsonparser-negative-slice-panic-dos-2026","unknown",0.2,false,[],[42,43],"GO-2026-4514","GHSA-6g7g-w4f8-9c9x",[],[46,48,50,52,54,56],{"_key":47},"SUSE-SU-2026:1135-1",{"_key":49},"OPENSUSE-SU-2026:10731-1",{"_key":51},"DEBIAN-CVE-2026-32285",{"_key":53},"UBUNTU-CVE-2026-32285",{"_key":55},"RHSA-2026:35111",{"_key":57},"RHSA-2026:7191",[],[60,61,62,63,64,66],{"_key":47},{"_key":49},{"_key":55},{"_key":57},{"_key":65},"CGA-636M-88QG-R87Q",{"_key":67},"CGA-2QR9-W23H-H74X","2026-03-26T19:40:51.837Z","2026-07-21T12:05:17.787Z","Analyzed",{"cisa_kev":39,"cisa_ransomware":39,"cisa_vendor":9,"epss_severity":72,"epss_score":73,"severity":74,"severity_score":75,"severity_version":76,"severity_source":77,"severity_vector":78,"severity_status":70},"low",0.0075,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[80,90,94,98,103,107,111,115,120,124,128,134,138,143,148,152,156,160,164,168,172,176,180,184,188,192],{"url":81,"sources":82,"tags":85},"https://github.com/buger/jsonparser/issues/275",[77,83,84],"osv_go","nvd",[86,87,88,89],"REPORT","WEB","Issue Tracking","Third Party Advisory",{"url":91,"sources":92,"tags":93},"https://github.com/golang/vulndb/issues/4514",[77,83,84],[86,87,88,89],{"url":95,"sources":96,"tags":97},"https://pkg.go.dev/vuln/GO-2026-4514",[77,84,83],[87,89],{"url":99,"sources":100,"tags":101},"https://nvd.nist.gov/vuln/detail/CVE-2026-32285",[83],[102],"Advisory",{"url":104,"sources":105,"tags":106},"https://github.com/buger/jsonparser/pull/276",[83],[87],{"url":108,"sources":109,"tags":110},"https://github.com/buger/jsonparser/commit/a69e7e01cd4ad67bdfd3ac2c080b9212af16f4b0",[83],[87],{"url":112,"sources":113,"tags":114},"https://cyber.securityinfinity.com/buger-jsonparser-negative-slice-panic-dos-2026",[83],[87],{"url":116,"sources":117,"tags":118},"https://github.com/buger/jsonparser",[83],[119],"PACKAGE",{"url":121,"sources":122,"tags":123},"https://github.com/buger/jsonparser/releases/tag/v1.1.2",[83],[87],{"url":36,"sources":125,"tags":126},[77,84,83],[127,87,89],"Exploit",{"url":129,"sources":130,"tags":131},"https://access.redhat.com/security/cve/CVE-2026-32285",[77],[132,133],"VDB Entry","X Refsource REDHAT",{"url":135,"sources":136,"tags":137},"https://bugzilla.redhat.com/show_bug.cgi?id=2451846",[77],[88,133],{"url":139,"sources":140,"tags":141},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32285.json",[77],[142],"X Sadp Csaf Vex",{"url":144,"sources":145,"tags":146},"https://access.redhat.com/errata/RHSA-2026:22423",[77],[147,133],"Vendor Advisory",{"url":149,"sources":150,"tags":151},"https://access.redhat.com/errata/RHSA-2026:22347",[77],[147,133],{"url":153,"sources":154,"tags":155},"https://access.redhat.com/errata/RHSA-2026:21769",[77],[147,133],{"url":157,"sources":158,"tags":159},"https://access.redhat.com/errata/RHSA-2026:23345",[77],[147,133],{"url":161,"sources":162,"tags":163},"https://access.redhat.com/errata/RHSA-2026:13548",[77],[147,133],{"url":165,"sources":166,"tags":167},"https://access.redhat.com/errata/RHSA-2026:7191",[77],[147,133],{"url":169,"sources":170,"tags":171},"https://access.redhat.com/errata/RHSA-2026:9385",[77],[147,133],{"url":173,"sources":174,"tags":175},"https://access.redhat.com/errata/RHSA-2026:19099",[77],[147,133],{"url":177,"sources":178,"tags":179},"https://access.redhat.com/errata/RHSA-2026:17121",[77],[147,133],{"url":181,"sources":182,"tags":183},"https://access.redhat.com/errata/RHSA-2026:17123",[77],[147,133],{"url":185,"sources":186,"tags":187},"https://access.redhat.com/errata/RHSA-2026:34364",[77],[147,133],{"url":189,"sources":190,"tags":191},"https://access.redhat.com/errata/RHSA-2026:35111",[77],[147,133],{"url":193,"sources":194,"tags":195},"https://access.redhat.com/errata/RHSA-2026:36882",[77],[147,133],[],{"date":198,"score":73,"percentile":199},"2026-07-05",0.50472,[201,205,208,211,214,218,222,225,228,231,234,237,240,243,246,249,252,255,258,261,264,267,270,273,276,279,282,286,289,292,295,298,302,305,308,311,314,318,321,325,327,330,334,337,340,343,346,349,352,355,358,361,363,366,369,372,375,379,382,385,388,391,395,398,401,404,407,410,414,417,420,423,426,429,432,435,438,441,444,447,450,454,457,460,463,466,469,472,475,478],{"date":202,"score":203,"percentile":204},"2026-03-27",0.00017,0.03915,{"date":206,"score":203,"percentile":207},"2026-03-28",0.03919,{"date":209,"score":203,"percentile":210},"2026-03-29",0.03911,{"date":212,"score":203,"percentile":213},"2026-03-30",0.03896,{"date":215,"score":216,"percentile":217},"2026-03-31",0.00041,0.12564,{"date":219,"score":220,"percentile":221},"2026-04-01",0.00054,0.1705,{"date":223,"score":220,"percentile":224},"2026-04-02",0.17223,{"date":226,"score":220,"percentile":227},"2026-04-03",0.17243,{"date":229,"score":220,"percentile":230},"2026-04-04",0.17273,{"date":232,"score":220,"percentile":233},"2026-04-05",0.1724,{"date":235,"score":220,"percentile":236},"2026-04-06",0.17067,{"date":238,"score":220,"percentile":239},"2026-04-07",0.17054,{"date":241,"score":220,"percentile":242},"2026-04-08",0.17144,{"date":244,"score":220,"percentile":245},"2026-04-09",0.17201,{"date":247,"score":220,"percentile":248},"2026-04-10",0.17214,{"date":250,"score":220,"percentile":251},"2026-04-11",0.17176,{"date":253,"score":220,"percentile":254},"2026-04-12",0.17129,{"date":256,"score":220,"percentile":257},"2026-04-13",0.17069,{"date":259,"score":220,"percentile":260},"2026-04-14",0.16985,{"date":262,"score":220,"percentile":263},"2026-04-15",0.17022,{"date":265,"score":220,"percentile":266},"2026-04-16",0.17005,{"date":268,"score":220,"percentile":269},"2026-04-17",0.17006,{"date":271,"score":220,"percentile":272},"2026-04-18",0.17009,{"date":274,"score":220,"percentile":275},"2026-04-19",0.16957,{"date":277,"score":220,"percentile":278},"2026-04-20",0.16943,{"date":280,"score":220,"percentile":281},"2026-04-21",0.17045,{"date":283,"score":284,"percentile":285},"2026-04-22",0.00052,0.16438,{"date":287,"score":284,"percentile":288},"2026-04-23",0.16452,{"date":290,"score":284,"percentile":291},"2026-04-24",0.16269,{"date":293,"score":284,"percentile":294},"2026-04-25",0.16281,{"date":296,"score":284,"percentile":297},"2026-04-26",0.16264,{"date":299,"score":300,"percentile":301},"2026-04-27",0.00057,0.17719,{"date":303,"score":300,"percentile":304},"2026-04-28",0.17685,{"date":306,"score":300,"percentile":307},"2026-04-29",0.1769,{"date":309,"score":300,"percentile":310},"2026-04-30",0.17662,{"date":312,"score":300,"percentile":313},"2026-05-01",0.17643,{"date":315,"score":316,"percentile":317},"2026-05-02",0.00018,0.04748,{"date":319,"score":316,"percentile":320},"2026-05-03",0.04738,{"date":322,"score":323,"percentile":324},"2026-05-04",0.00021,0.05903,{"date":326,"score":323,"percentile":324},"2026-05-05",{"date":328,"score":323,"percentile":329},"2026-05-06",0.05924,{"date":331,"score":332,"percentile":333},"2026-05-07",0.00029,0.0817,{"date":335,"score":332,"percentile":336},"2026-05-08",0.08186,{"date":338,"score":332,"percentile":339},"2026-05-09",0.08235,{"date":341,"score":332,"percentile":342},"2026-05-10",0.08238,{"date":344,"score":332,"percentile":345},"2026-05-11",0.0822,{"date":347,"score":332,"percentile":348},"2026-05-12",0.08248,{"date":350,"score":332,"percentile":351},"2026-05-13",0.08264,{"date":353,"score":332,"percentile":354},"2026-05-14",0.08303,{"date":356,"score":332,"percentile":357},"2026-05-15",0.08304,{"date":359,"score":332,"percentile":360},"2026-05-16",0.08312,{"date":362,"score":332,"percentile":354},"2026-05-17",{"date":364,"score":332,"percentile":365},"2026-05-18",0.08267,{"date":367,"score":332,"percentile":368},"2026-05-19",0.08247,{"date":370,"score":332,"percentile":371},"2026-05-20",0.08244,{"date":373,"score":332,"percentile":374},"2026-05-21",0.08229,{"date":376,"score":377,"percentile":378},"2026-05-22",0.0003,0.08851,{"date":380,"score":377,"percentile":381},"2026-05-23",0.08841,{"date":383,"score":377,"percentile":384},"2026-05-24",0.08845,{"date":386,"score":377,"percentile":387},"2026-05-25",0.08834,{"date":389,"score":377,"percentile":390},"2026-05-26",0.08829,{"date":392,"score":393,"percentile":394},"2026-05-27",0.00025,0.07456,{"date":396,"score":393,"percentile":397},"2026-05-28",0.07604,{"date":399,"score":393,"percentile":400},"2026-05-29",0.07625,{"date":402,"score":377,"percentile":403},"2026-05-30",0.0906,{"date":405,"score":377,"percentile":406},"2026-05-31",0.09044,{"date":408,"score":377,"percentile":409},"2026-06-01",0.09019,{"date":411,"score":412,"percentile":413},"2026-06-02",0.00031,0.09351,{"date":415,"score":412,"percentile":416},"2026-06-03",0.09308,{"date":418,"score":412,"percentile":419},"2026-06-04",0.09326,{"date":421,"score":412,"percentile":422},"2026-06-05",0.0937,{"date":424,"score":412,"percentile":425},"2026-06-06",0.0939,{"date":427,"score":412,"percentile":428},"2026-06-07",0.09375,{"date":430,"score":412,"percentile":431},"2026-06-08",0.09316,{"date":433,"score":412,"percentile":434},"2026-06-09",0.09347,{"date":436,"score":412,"percentile":437},"2026-06-10",0.09388,{"date":439,"score":412,"percentile":440},"2026-06-11",0.09432,{"date":442,"score":412,"percentile":443},"2026-06-12",0.09487,{"date":445,"score":412,"percentile":446},"2026-06-13",0.0948,{"date":448,"score":412,"percentile":449},"2026-06-14",0.09469,{"date":451,"score":452,"percentile":453},"2026-06-15",0.00542,0.41045,{"date":455,"score":452,"percentile":456},"2026-06-16",0.41102,{"date":458,"score":452,"percentile":459},"2026-06-17",0.41181,{"date":461,"score":452,"percentile":462},"2026-06-18",0.41225,{"date":464,"score":452,"percentile":465},"2026-06-19",0.41218,{"date":467,"score":452,"percentile":468},"2026-06-20",0.41214,{"date":470,"score":452,"percentile":471},"2026-06-21",0.41197,{"date":473,"score":452,"percentile":474},"2026-06-22",0.41188,{"date":476,"score":452,"percentile":477},"2026-06-23",0.41263,{"date":479,"score":452,"percentile":480},"2026-06-24",0.41299,[482,486,489],{"source":83,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":483,"cvss_v4_0":9},{"baseScore":75,"baseSeverity":9,"vectorString":78,"impactScore":484,"exploitabilityScore":485},6,10,{"source":77,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":487,"cvss_v4_0":9},{"baseScore":75,"baseSeverity":488,"vectorString":78,"impactScore":484,"exploitabilityScore":485},"HIGH",{"source":84,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":490,"cvss_v4_0":9},{"baseScore":75,"baseSeverity":488,"vectorString":78,"impactScore":484,"exploitabilityScore":485},[492,501,512],{"ecosystem":9,"name":493,"vendor":493,"product":493,"cpe_part":494,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":495},"github.com/buger/jsonparser","a",[496],{"version":497,"is_range":498,"range_type":77,"version_start":9,"version_start_type":9,"version_end":499,"version_end_type":500,"fixed_in":9},"\u003C 1.1.2",true,"1.1.2","excluding",{"ecosystem":502,"name":493,"vendor":503,"product":504,"cpe_part":9,"purl_type":505,"purl_namespace":503,"purl_name":504,"source":9,"versions":506},"Go","github.com/buger","jsonparser","golang",[507,510],{"version":508,"is_range":498,"range_type":509,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all","semver",{"version":511,"is_range":498,"range_type":509,"version_start":9,"version_start_type":9,"version_end":499,"version_end_type":500,"fixed_in":9},"lt1_1_2",{"ecosystem":9,"name":504,"vendor":513,"product":504,"cpe_part":494,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":514},"jsonparser_project",[515],{"version":516,"is_range":498,"range_type":517,"version_start":9,"version_start_type":9,"version_end":499,"version_end_type":500,"fixed_in":9},"lt1.1.2","cpe"]