> CVE-2026-32285

« BACK_TO_HOME
PUBLISHED
2026-03-26 20:16
MODIFIED
2026-03-26 20:16
EPSS (Prob. Exploit)
0.78%
Top 43.9%
DATA SOURCES:
NVD 🔗 2026-03-26 RED HAT 🔗 2026-03-29 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-05 OSV 🔗 2026-11-01

> DESCRIPTION

The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 release
Red Hat OpenShift distributed tracing platform (Tempo) 3.9.2 has been released
Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.15.2 security update
Red Hat Advanced Cluster Management for Kubernetes 2.15 General Availability release images, which add new features and enhancements, bug fixes, and updated container images.
Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.8.6
Assisted installer RHEL 9 components for the multicluster engine for Kubernetes 2.8.6 General Availability release, with updates to container images.
Red Hat Security Advisory: Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.8.6
Assisted installer RHEL 8 components for the multicluster engine for Kubernetes 2.8.6 General Availability release, with updates to container images.
Red Hat Security Advisory: Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.10.3
Assisted installer RHEL 9 components for the multicluster engine for Kubernetes 2.10.3 General Availability release, with updates to container images.
Red Hat Security Advisory: Multicluster Global Hub 1.5.4 security update
Multicluster Global Hub v1.5.4 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a s...
Red Hat Security Advisory: Multicluster Global Hub 1.4.5 security update
Multicluster Global Hub v1.4.5 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a s...
Red Hat Security Advisory: Multicluster Global Hub 1.3.4 security update
Multicluster Global Hub v1.3.4 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a s...
Red Hat Security Advisory: Multicluster Global Hub 1.6.2 security update
Multicluster Global Hub v1.6.2 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a s...
Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.4.6
Logging for Red Hat OpenShift - 6.4.6
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available.
Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.14.3 security update
Red Hat Advanced Cluster Management for Kubernetes 2.14 General Availability release images, which add new features and enhancements, bug fixes, and updated container images.
Red Hat Security Advisory: Cluster Observability Operator 1.5.2
The Cluster Observability Operator (COO) is a Red Hat OpenShift Container Platform Operator that you can deploy to manage observability component stacks by using custom resource descriptions (CRDs).
Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.17
Logging for Red Hat OpenShift - 6.0.17

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Important

> GITHUB SECURITY ADVISORY

GHSA-6g7g-w4f8-9c9x HIGH

github.com/buger/jsonparser has a denial of service vulnerability

AFFECTED PACKAGES:
GO / github.com/buger/jsonparser
<= 1.1.1
Fixed in: 1.1.2

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Denial of service in github.com/buger/jsonparser

AFFECTED PACKAGES:
Unknown / Unknown
3 versions affected
ALIASES:
GHSA-6g7g-w4f8-9c9x, GO-2026-4514

> HISTORIQUE DES MODIFICATIONS

Première apparition
26/03/2026 20:16
Source: NVD
📊 ENRICHISSEMENT 29/03/2026 05:01
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Important", "severity_scale": null }
📊 ENRICHISSEMENT 29/03/2026 05:01
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 2 Dernière mise à jour: 7 months ago

> REFERENCES

https://github.com/buger/jsonparser/issues/275
https://github.com/golang/vulndb/issues/4514
https://pkg.go.dev/vuln/GO-2026-4514
« BACK_TO_HOME