EUVD-2018-1885

Malware in sbrugna...

EUVD-2023-59777

Malicious code in bioql PyPI...

EUVD-2022-39135

Malicious code in bioql PyPI...

EUVD-2023-31821

Malicious code in bioql PyPI...

cJSON-devel-1.7.19-1.1 on GA media (moderate)

cJSON-devel-1.7.19-1.1 on GA media Announcement ID: openSUSE-SU-2025:15583-1 Rating: moderate Cross-References: CVE-2023-26819 CVE-2025-57052 CVSS scores: CVE-2023-26819 SUSE : 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2023-26819 SUSE : 2.1...

Advisory ROSA-SA-2025-3021

software: cjson 1.7.19 AXIS: ROSA-CHROME unaffected versions = cjson-1.7.19-1 affected versions cjson-1.7.19-1 CVE-ID: CVE-2025-57052 BDU-ID: None CVE-Crit: CRITICAL CVE-DESC.: Vulnerability in cJSON 1.5.0-1.7.18: allows a remote attacker to perform array escaping via decodearrayindexfrompointer...

OPENSUSE-SU-2025:15583-1 cJSON-devel-1.7.19-1.1 on GA media

These are all security issues fixed in the cJSON-devel-1.7.19-1.1 package on the GA media of openSUSE Tumbleweed...

Debian: Security Advisory (DLA-4304-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4304-1] cjson security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4304-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz September 18, 2025 https://wiki.debian.org/LTS -...

DLA-4304-1 cjson - security update

Bulletin has no description...

Debian dla-4304 : libcjson-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4304 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4304-1 [email protected] https://www.debian.org/lts/security/...

Debian: Security Advisory (DSA-6001-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 6001-1] cjson security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6001-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 14, 2025 https://www.debian.org/security/faq -...

DSA-6001-1 cjson - security update

Bulletin has no description...

Debian dsa-6001 : libcjson-dev - security update

The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6001 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6001-1 [email protected] https://www.debian.org/security/...

Advisory ROSA-SA-2025-2978

software: cjson 1.7.18 WASP: ROSA-CHROME unaffected versions = cjson-1.7.18-2 affected versions cjson-1.7.18-2 CVE-ID: CVE-2023-26819 BDU-ID: None CVE-Crit: LOW CVE-DESC.: cJSON 1.7.15 may cause a denial of service when processing a specially generated JSON document, e.g.: "a": true, "b": null,...

The vulnerability of the cJSON_SetValuestring function in the cJSON.c library for working with JSON objects in C language allows a attacker to cause a service denial.

The vulnerability of the cJSONSetValuestring function in the cJSON.c library for working with JSON objects in C is related to a pointer dereferencing error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cJSON_ParseWithLength function allows attackers to access confidential information.

The vulnerability of the cJSONParseWithLength function in the cJSON parser is related to reading data beyond the memory bounds. Exploiting this vulnerability could allow an attacker to access confidential information...

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.

...

Linux Distros Unpatched Vulnerability : CVE-2025-57052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decodearrayindexfrompointer function in cJSONUtils.c, allowing remote attackers to bypass array...