Skip to content
Threat Feed
Subscribe

Product

Json_repair (< 0.60.1)

1 brief RSS
medium advisory

Circular JSON Schema $ref Causes Unbounded CPU DoS in json_repair Library

An unbounded CPU Denial-of-Service vulnerability exists in the `json_repair` library's `SchemaRepairer.resolve_schema()` function, allowing an unauthenticated attacker to provide a specially crafted JSON schema containing a circular `$ref` pointer, leading to indefinite CPU consumption and service unavailability.

json_repair denial-of-service supply-chain application-vulnerability python
1t