Lucene search
+L

7 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•7 views

Astra Linux – Vulnerability in ujson

UltraJSON is a fast JSON encoder and decoder written in pure C, with bindings for Python 3.7+. Before version 5.12.1, when the ujsondump function wrote to a file-like object, and the write operation raised an exception, the serialized JSON string object was not decremented, resulting in memory...

8.7CVSS5.5AI score0.00644EPSS
SaveExploits1References1
OSV
OSV
•added 2026/05/27 9:16 p.m.•11 views

PYSEC-2026-2293

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump writes to a file-like object and the write operation raises an exception, the serialized JSON string object is not decremented, leaking memory. Each failed write operatio...

7.5CVSS6.1AI score0.00644EPSS
SaveExploits1References3
NVD
NVD
•added 2026/05/27 9:16 p.m.•27 views

CVE-2026-44660

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump writes to a file-like object and the write operation raises an exception, the serialized JSON string object is not decremented, leaking memory. Each failed write operatio...

8.7CVSS0.00644EPSS
SaveExploits1References3
OSV
OSV
•added 2026/05/27 9:16 p.m.•27 views

UBUNTU-CVE-2026-44660

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump writes to a file-like object and the write operation raises an exception, the serialized JSON string object is not decremented, leaking memory. Each failed write operatio...

8.7CVSS5.8AI score0.00644EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2026/05/27 8:42 p.m.•29 views

CVE-2026-44660

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump writes to a file-like object and the write operation raises an exception, the serialized JSON string object is not decremented, leaking memory. Each failed write operatio...

8.7CVSS5.8AI score0.00644EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/27 12:00 a.m.•1 views

CVE-2026-44660: Missing Release of Memory after Effective Lifetime

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump writes to a file-like object and the write operation raises an exception, the serialized JSON string object is not decremented, leaking memory. Each failed write operatio...

8.7CVSS7.2AI score0.00644EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2026/05/12 10:25 p.m.•19 views

UltraJSON has a Memory Leak in ujson.dump() on Write Failure

Summary When ujson.dump writes to a file-like object and the write operation raises an exception, the serialized JSON string object is not decremented, leaking memory. Each failed write operation leaks the full size of the serialized payload. Code that uses ujson.dumps rather than ujson.dump or...

8.7CVSS5.8AI score0.00644EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder