CVE-2026-67215

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-67215
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-67215.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-67215
Downstream
Published
2026-07-29T13:32:02.975Z
Modified
2026-07-30T04:01:39.092430689Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
cJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion
Details

cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUtilsApplyPatches() or cJSONUtilsApplyPatchesCaseSensitive(). A patch containing add and copy operations grafts duplicated subtrees to amplify document depth beyond the parser's nesting limit: cJSONDelete() recurses with no depth bound, and the cJSONDuplicate() guard CJSONCIRCULARLIMIT is set to 10000, ten times the parser's 1000-level nesting limit and high enough to overflow a default thread stack. An attacker who can supply the patch document can crash the process, resulting in denial of service.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/67xxx/CVE-2026-67215.json",
    "cwe_ids": [
        "CWE-674"
    ],
    "cna_assigner": "VulnCheck"
}
References

Affected packages

Git / github.com/davegamble/cjson

Affected ranges

Type
GIT
Repo
https://github.com/davegamble/cjson
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c859b25da02955fef659d658b8f324b5cde87be3
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.7.19"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

v0.*
v0.0.0
v1.*
v1.0.0
v1.0.1
v1.0.2
v1.1.0
v1.2.0
v1.2.1
v1.3.0
v1.3.1
v1.3.2
v1.4.0
v1.4.1
v1.4.2
v1.4.3
v1.4.4
v1.4.5
v1.4.6
v1.4.7
v1.5.0
v1.5.1
v1.5.2
v1.5.3
v1.5.4
v1.5.5
v1.5.6
v1.5.7
v1.5.8
v1.5.9
v1.6.0
v1.7.0
v1.7.1
v1.7.10
v1.7.11
v1.7.12
v1.7.13
v1.7.14
v1.7.15
v1.7.16
v1.7.17
v1.7.18
v1.7.19
v1.7.2
v1.7.3
v1.7.4
v1.7.5
v1.7.6
v1.7.7
v1.7.8
v1.7.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-67215.json"