Vulnerability index

Browse CVEs

7 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Ultrajson MEDIUM 6.5
CVE-2026-54911

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.13.0, ujson.dumps() (or ujson.dump() or ujso…

Fix: 5.13.0+
Fix from $1,600 2026-06-22
Ultrajson HIGH 7.5
CVE-2026-44660

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump() writes to a file-lik…

Fix: 5.12.1+
Fix from $1,950 2026-05-27
Ultrajson HIGH 7.5
CVE-2026-32874

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Versions 5.4.0 through 5.11.0 contain an accumulating m…

Fix: 5.12.0+
Fix from $1,950 2026-03-20
Ultrajson HIGH 7.5
CVE-2026-32875

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Versions 5.10 through 5.11.0 are vulnerable to buffer o…

Fix: 5.12.0+
Fix from $1,950 2026-03-20
Ultrajson HIGH 7.5
CVE-2022-31116

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Affected versions were found to improperly decode certa…

Fix: 5.4.0+
Fix from $1,950 2022-07-05
Ultrajson MEDIUM 5.9
CVE-2022-31117

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while rea…

Fix: 5.4.0+
Fix from $1,600 2022-07-05
Ultrajson MEDIUM 5.5
CVE-2021-45958

UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for exa…

Fix: 5.2.0+
Fix from $1,600 2022-01-01