Threats tagged 'ghsa-pc2w-7g9p-pr43'

A vulnerability in json-glib's JSONPath slice evaluator can cause an infinite loop when processing slice expressions with a negative step. This flaw allows an attacker who can supply crafted JSONPath expressions to cause the application to hang, resulting in a denial of service. No confidentiality or integrity impacts have been reported. No fixed release is currently available, and all shipped Red Hat and Fedora json-glib builds with this evaluator are affected.