Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-c8rr-9gxc-jprv
  • PyPI/ujson
UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop 18 Mar
  • Fix available
  • Severity - 7.5 (High)
GHSA-wgvc-ghv9-3pmm
  • PyPI/ujson
UltraJSON has a Memory Leak parsing large integers allows DoS 18 Mar
  • Fix available
  • Severity - 7.5 (High)
GHSA-wpqr-jcpx-745r
  • PyPI/ujson
Incorrect handling of invalid surrogate pair characters 05 Jul 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-fm67-cv37-96ff
  • PyPI/ujson
Potential double free of buffer during string decoding 05 Jul 2022
  • Fix available
  • Severity - 5.9 (Medium)
OSV-2021-1809
  • PyPI/ujson
  • github.com/ultrajson/ultrajson.git
Heap-buffer-overflow in ujson.cpython-38-x86_64-linux-gnu.so 25 Feb 2022
  • Fix available
GHSA-fh56-85cw-5pq6
  • PyPI/ujson
UltraJSON vulnerable to Out-of-bounds Write 21 Jan 2022
  • Fix available
  • Severity - 6.8 (Medium)
PYSEC-2022-25
  • PyPI/ujson
See record for full details 01 Jan 2022
  • Fix available
OSV-2021-955
  • PyPI/ujson
  • github.com/ultrajson/ultrajson.git
Stack-buffer-overflow in Buffer_AppendIndentUnchecked 11 Jul 2021
  • Fix available