Lucene search
+L

8 matches found

Kitploit
Kitploit
•added 2026/10/08 6:09 a.m.•15 views

CVE-2025-67221

CVE-2025-67221 Vulnerability Summary Field| Value ---|--- CVE ID| CVE-2025-67221 Affected Product| orjson Affected Versions| ≤ 3.11.4 Vulnerability Type| Denial of Service Uncontrolled Recursion Attack Vector| Remote if attacker controls serialized data Description A denial-of-service vulnerabili...

7.5CVSS6AI score0.00643EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2026/05/06 10:06 p.m.•26 views

aiograpi has dependency on vulnerable orjson 3.11.4 (CVE-2025-67221)

Impact aiograpi 0.6.6 / 0.7.0 / 0.7.1 declared orjson==3.11.6 and later ==3.11.8 in requirements.txt but setup.py carried a hard-coded duplicate requirements = ... list that was never updated and still pinned orjson==3.11.4. When setuptools builds the source distribution it reads the metadata fro...

7.5CVSS5.8AI score0.00643EPSS
SaveExploits1References4Affected Software1
OpenVAS
OpenVAS
•added 2026/04/03 12:00 a.m.•30 views

SUSE: Security Advisory (SUSE-SU-2026:20920-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS5.8AI score0.00643EPSS
SaveExploits1References4
IBM Security Bulletins
IBM Security Bulletins
•added 2026/03/31 1:54 p.m.•23 views

Security Bulletin: Maximo AI Service uses multiple third party dependencies which is vulnerable to multiple CVEs.

Summary Maximo AI Service uses wheel-0.41.3-py3-none-any.whl, orjson-3.10.14-cp311-cp311-manylinux217x8664.manylinux2014x8664.whl, pythonmultipart-0.0.21-py3-none-any.whl, pyasn1-0.6.1.tar.gz, sentencepiece-0.2.0-cp311-cp311-manylinux217x8664.manylinux2014x8664.whl, tar-7.4.3.tgz, tar-7.5.2.tgz...

8.6CVSS6.9AI score0.02239EPSS
SaveExploits9Affected Software1
OPENSUSE Linux
OPENSUSE Linux
•added 2026/03/28 12:00 a.m.•12 views

Security update for python-orjson (moderate)

openSUSE security update: security update for python-orjson ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20407-1 Rating: moderate References: bsc1257121 Cross-References: CVE-2025-67221 CVSS scores: CVE-2025-67221 SUSE : 5.9...

8.2CVSS5.6AI score0.00643EPSS
SaveExploits1References1
OSV
OSV
•added 2026/03/20 12:07 p.m.•10 views

OPENSUSE-SU-2026:20407-1 Security update for python-orjson

This update for python-orjson fixes the following issues: - CVE-2025-67221: Fixed write outsize of allocated memory on json dump bsc1257121...

7.5CVSS5.7AI score0.00643EPSS
SaveExploits1References2
Wolfi
Wolfi
•added 2026/02/04 7:48 p.m.•21 views

CVE-2025-67221 vulnerabilities

Vulnerabilities for packages: emissary, kserve, datadog-agent...

7.5CVSS5.7AI score0.00643EPSS
SaveExploits1
NVD
NVD
•added 2026/01/22 5:16 p.m.•13 views

CVE-2025-67221

The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents...

7.5CVSS0.00643EPSS
SaveExploits1References2
Rows per page
Query Builder