CVE-2026-32874
- EPSS 0.07%
- Veröffentlicht 20.03.2026 02:16:35
- Zuletzt bearbeitet 23.03.2026 15:27:14
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Versions 5.4.0 through 5.11.0 contain an accumulating memory leak in JSON parsing large (outside of the range [-2^63, 2^64 - 1]) integers. The leaked memory...
CVE-2026-32875
- EPSS 0.05%
- Veröffentlicht 20.03.2026 02:16:35
- Zuletzt bearbeitet 23.03.2026 15:29:05
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Versions 5.10 through 5.11.0 are vulnerable to buffer overflow or infinite loop through large indent handling. ujson.dumps() crashes the Python interpreter ...
CVE-2022-31116
- EPSS 0.07%
- Veröffentlicht 05.07.2022 18:15:08
- Zuletzt bearbeitet 21.11.2024 07:03:55
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Affected versions were found to improperly decode certain characters. JSON strings that contain escaped surrogate characters not part of a proper surrogate ...
CVE-2022-31117
- EPSS 0.17%
- Veröffentlicht 05.07.2022 18:15:08
- Zuletzt bearbeitet 21.11.2024 07:03:55
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string decoding can cause the buffer to get freed twice. Due to how UltraJSON ...
CVE-2021-45958
- EPSS 0.29%
- Veröffentlicht 01.01.2022 00:15:08
- Zuletzt bearbeitet 21.11.2024 06:33:22
UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use a large amount of indentation.