acg-feature-extractor (0.0.2), aiographql-client (>=1.0.0, <=1.0.1) +31 more potentially affected by CVE-2022-31116 via ujson (2.0.3)

ujson PYPI version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - acg-feature-extractor 0.0.2 - aiographql-client =1.0.0, =2.3.0, =3.7.1, =3.0.2, =3.7.0, =1.2.0, =0.9.20, =0.3.0, =1.0.0 and more Source cves:...

anf-feed (>=0.0.1.dev2, <=0.0.1.dev3), apartment-browser (0.0.1) +9 more potentially affected by CVE-2022-31116 via ujson (4.0.1)

ujson PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - anf-feed =0.0.1.dev2, =0.1.2, =20.11.12, =1.4.0, =0.16.0, =0.1.0, =1.0.3.dev0, =0.4.0, =0.1.7, =0.6.3, =0.6.4.1 Source cves: CVE-2022-31116 Source...

aio-fluid (>=0.1.0, <=0.2.2), aiotdlib (>=0.10.1, <=0.13.2) +94 more potentially affected by CVE-2022-31116 via ujson (4.3.0)

ujson PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - aio-fluid =0.1.0, =0.10.1, =0.7.1a0, =0.8.0a1, =0.7.1a0, =0.7.1a3, =0.1.7, =0.1.21, =0.0.4, =0.1.0b1, =3.1.0, =3.24.5, =0.3.0, =1.5.6 - bella 2.1.5 an...

aio-binance-library (>=2.0.1, <=2.0.6), aiohttp-boilerplate (0.2.6) +31 more potentially affected by CVE-2022-31116 via ujson (>=5.0.0, <=5.3.0)

ujson PYPI version =5.0.0, =2.0.1, =1.0.0, =0.9.0, =0.2.0, =0.2.1 - django-tbot-messages 0.2.2 - dsframework 0.1.98 - emerquant-dev 0.0.9 - fb-sapp 0.5.3 - gs-dbs-client 0.2.5.post44 - irisrelay 1.2.9 and more Source cves: CVE-2022-31116 Source advisory: OSV:PYSEC-2026-1057...

auto-augment (1.0.0), betfairlightweight (>=0.0.0b14, <=2.7.0) +13 more potentially affected by CVE-2022-31116 via ujson (3.0.0)

ujson PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - auto-augment 1.0.0 - betfairlightweight =0.0.0b14, =10.0.0, =1.6.8, =0.13.2, =0.1.0, =4.1.0, =0.7.4, =0.0.1b1, =0.12.1, =0.0.1, =1.14.9, =1.0.21,...

Linux Distros Unpatched Vulnerability : CVE-2022-31116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Affected versions were found to improperly decode certain...

GLSA-202403-03 : UltraJSON: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202403-03 UltraJSON: Multiple Vulnerabilities - UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Affected versions were found to improperly decode certain characters. JSON strings that...

Ubuntu: Security Advisory (USN-6629-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-6629-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 20.04 LTS : UltraJSON vulnerabilities (USN-6629-3)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6629-3 advisory. USN-6629-1 fixed vulnerabilities in UltraJSON. This update provides the corresponding updates for Ubuntu 20.04 LTS. Tenable has extracted the preceding...

USN-6629-3: UltraJSON vulnerabilities

USN-6629-1 fixed vulnerabilities in UltraJSON. This update provides the corresponding updates for Ubuntu 20.04 LTS. Original advisory details: It was discovered that UltraJSON incorrectly handled certain input with a large amount of indentation. An attacker could possibly use this issue to crash...

USN-6629-2: UltraJSON vulnerability

USN-6629-1 fixed vulnerabilities in UltraJSON. This update provides the corresponding updates for Ubuntu 20.04 LTS. Original advisory details: It was discovered that UltraJSON incorrectly handled certain input with a large amount of indentation. An attacker could possibly use this issue to crash...

Ubuntu: Security Advisory (USN-6629-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 LTS / 18.04 LTS / 22.04 LTS : UltraJSON vulnerabilities (USN-6629-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6629-1 advisory. It was discovered that UltraJSON incorrectly handled certain input with a large amount of indentation. An attacker could possibly...

SUSE CVE-2022-31116

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Affected versions were found to improperly decode certain characters. JSON strings that contain escaped surrogate characters not part of a proper surrogate pair were decoded incorrectly. Besides corrupti...

RHEL 8 : Red Hat OpenStack Platform 16.2.4 (python-ujson) (RHSA-2022:8850)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:8850 advisory. UltraJSON is an ultra fast JSON encoder and decoder Security Fixes: improper decoding of escaped surrogate characters may lead to string...

RHEL 8 : Red Hat OpenStack Platform 16.1.9 (python-ujson) (RHSA-2022:8864)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:8864 advisory. UltraJSON is an ultra fast JSON encoder and decoder Security Fixes: improper decoding of escaped surrogate characters may lead to string...

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.1.9 (python-ujson) security update

An update for python-ujson is now available for Red Hat OpenStack Platform 16.1.9 Train for Red Hat Enterprise Linux RHEL 8.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

openSUSE: Security Advisory for python-ujson (SUSE-SU-2022:2673-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2022:2673-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...