CVE 2020-36067

GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call.

See the CVE page on Mitre.org for more details.