AZL-112750
Dashboard / Vulnerabilities / AZL-112750
Summary: CVE-2026-120194 affecting package json-glib 1.8.0-1
Details: A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite loop when given a slice expression with a negative step. An application that evaluates attacker-controlled JSONPath expressions can be forced into a hang, leading to a denial of service.
References: https://nvd.nist.gov/vuln/detail/CVE-2026-120194
Affected packages
Package
Name: json-glib
Purl: pkg:rpm/azure-linux/json-glib
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -None
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
