GHSA-WPQR-JCPX-745R Incorrect handling of invalid surrogate pair characters

🗓️ 05 Jul 2022 21:06:00Reported by GoogleType

osv🔗 osv.dev👁 40 Views

Incorrect handling of invalid surrogate pair characters. Impact on JSON parsing from untrusted sources, potential key confusion, and value overwriting in dictionaries. Upgrade to UltraJSON 5.4.0

Reporter	Title	Published	Views	Family All 62
AlpineLinux	CVE-2022-31116	5 Jul 202217:35	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in ujson	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the Python programming language-based UltraJSON package, which allows attackers to compromise data integrity	11 Jul 202200:00	–	bdu_fstec
IBM Security Bulletins	Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities	20 Jun 202304:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	12 Jan 202317:22	–	ibm
Circl	CVE-2022-31116	5 Jul 202222:13	–	circl
CNNVD	UltraJSON 安全漏洞	5 Jul 202200:00	–	cnnvd
CVE	CVE-2022-31116	5 Jul 202217:35	–	cve
Cvelist	CVE-2022-31116 Incorrect handling of invalid surrogate pair characters in ujson	5 Jul 202217:35	–	cvelist
Debian CVE	CVE-2022-31116	5 Jul 202217:35	–	debiancve

Source	Link
github	www.github.com/ultrajson/ultrajson/security/advisories/GHSA-wpqr-jcpx-745r
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-31116
github	www.github.com/ultrajson/ultrajson/commit/67ec07183342589d602e0fcf7bb1ff3e19272687
github	www.github.com/ultrajson/ultrajson
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/NAU5N4A7EUK2AMUCOLYDD5ARXAJYZBD2
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/OPPU5FZP3LCTXYORFH7NHUMYA5X66IA7

07 Jul 2026 11:56Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

EPSS0.02283