json-glib vulnerabilities

CVEs whose affected-version data names the json-glib package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-120194High· 7.5

6d ago

Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step

A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions c…

▾ TwilightRed Hat · json-glibEPSS 0.47%via CVEORG