Lucene search

Incorrect handling of invalid surrogate pair characters

🗓️ 05 Jul 2022 21:00:06Reported by GoogleType

osv🔗 osv.dev👁 26 Views

Incorrect handling of invalid surrogate pair characters. Impact on JSON parsing from untrusted sources, potential key confusion, and value overwriting in dictionaries. Upgrade to UltraJSON 5.4.0

Reporter	Title	Published	Views	Family All 44
NVD	CVE-2022-31116	5 Jul 202218:15	–	nvd
RedhatCVE	CVE-2022-31116	7 Jul 202217:50	–	redhatcve
Cvelist	CVE-2022-31116 Incorrect handling of invalid surrogate pair characters in ujson	5 Jul 202217:35	–	cvelist
UbuntuCve	CVE-2022-31116	5 Jul 202200:00	–	ubuntucve
CVE	CVE-2022-31116	5 Jul 202218:15	–	cve
Veracode	Insecure Cryptography	6 Jul 202205:26	–	veracode
Prion	Type confusion	5 Jul 202218:15	–	prion
OSV	CVE-2022-31116	5 Jul 202218:15	–	osv
OSV	Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.4 (python-ujson) security update	16 Sep 202409:00	–	osv
OSV	Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (python-ujson) security update	16 Sep 202409:00	–	osv

Source	Link
github	www.github.com/ultrajson/ultrajson/security/advisories/GHSA-wpqr-jcpx-745r
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-31116
github	www.github.com/ultrajson/ultrajson/commit/67ec07183342589d602e0fcf7bb1ff3e19272687
github	www.github.com/ultrajson/ultrajson
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/NAU5N4A7EUK2AMUCOLYDD5ARXAJYZBD2
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/OPPU5FZP3LCTXYORFH7NHUMYA5X66IA7

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Jul 2022 21:06Current

1.1Low risk

Vulners AI Score1.1

CVSS37.5

EPSS0.002