AZL-112750
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112750.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-112750
- Upstream
- CVE-2026-120194
- Published
- 2026-10-31T10:16:38Z
- Modified
- 2026-11-11T05:27:43Z
- Summary
- CVE-2026-120194 affecting package json-glib 1.8.0-1
- Details
-
A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service.
- References