CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-10-31
GNOME json-glib Infinite Loop Denial of Service Vulnerability (CVE-2026-120194) Technical Advisory
[Affected Scope] Applications and systems utilizing the GNOME json-glib library to evaluate user-controlled JSONPath queries via json_path_query()
[Impact] An attacker can trigger an infinite loop by supplying a JSONPath slice expression with a negative step, leading to 100% CPU utilization and a complete Denial of Service (DoS)
[Mitigation] Upgrade the json-glib package to the latest patched version, or implement input validation to reject JSONPath expressions containing negative slice steps