Browse CVEs

MEDIUM 6.5 CVE-2026-54911 UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.13.0, ujson.dumps() (or ujson.dump() or ujso… Ultrajson 5.13.0+ Fix from $1,6002026-06-22 HIGH 7.5 CVE-2026-44660 UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump() writes to a file-lik… Ultrajson 5.12.1+ Fix from $1,9502026-05-27 HIGH 7.5 CVE-2026-32874 UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Versions 5.4.0 through 5.11.0 contain an accumulating m… Ultrajson 5.12.0+ Fix from $1,9502026-03-20 HIGH 7.5 CVE-2026-32875 UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Versions 5.10 through 5.11.0 are vulnerable to buffer o… Ultrajson 5.12.0+ Fix from $1,9502026-03-20 HIGH 7.5 CVE-2022-31116 UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Affected versions were found to improperly decode certa… Ultrajson 5.4.0+ Fix from $1,9502022-07-05 MEDIUM 5.9 CVE-2022-31117 UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while rea… Ultrajson 5.4.0+ Fix from $1,6002022-07-05 MEDIUM 5.5 CVE-2021-45958 UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for exa… Ultrajson 5.2.0+ Fix from $1,6002022-01-01