GHSA-XF7X-X43H-RPQH json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS

Circular JSON Schema $ref causes unbounded CPU DoS in jsonrepair Summary SchemaRepairer.resolveschema in jsonrepair follows JSON Schema $ref pointers in an unbounded while loop without any cycle detection. An attacker who can supply a schema containing a self-referencing $ref e.g., via the demo...

Infinite loop

Overview json-repair is an A package to repair broken json strings Affected versions of this package are vulnerable to Infinite loop via the resolveschema function. An attacker can cause the application to enter an infinite loop and exhaust CPU resources by submitting a specially crafted JSON...

adaptiq (0.12.9), aegis-finance-mcp (0.1.1) +184 more potentially affected by unknown CVE via json-repair (>=0.2.0, <=0.59.10)

json-repair PYPI version =0.2.0, =0.0.13, =0.1.1, =0.4.7, =0.0.6, =1.1.0a20250502, =1.2.0rc5, =0.3.16, =0.1.1, =0.2.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XF7X-X43H-RPQH...

adaptiq (0.12.9), aegis-finance-mcp (0.1.1) +184 more potentially affected by unknown CVE via json-repair (>=0.2.0, <=0.59.10)

json-repair PYPI version =0.2.0, =0.0.13, =0.1.1, =0.4.7, =0.0.6, =1.1.0a20250502, =1.2.0rc5, =0.3.16, =0.1.1, =0.2.1 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-JSONREPAIR-17971505...

adaptiq (0.12.9), aegis-finance-mcp (0.1.1) +184 more potentially affected by unknown CVE via json-repair (>=0.2.0, <=0.59.10)

json-repair PYPI version =0.2.0, =0.0.13, =0.1.1, =0.4.7, =0.0.6, =1.1.0a20250502, =1.2.0rc5, =0.3.16, =0.1.1, =0.2.1 and more Source cves: unknown CVE Source advisory: GHSA-XF7X-X43H-RPQH...

json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS

Circular JSON Schema $ref causes unbounded CPU DoS in jsonrepair Summary SchemaRepairer.resolveschema in jsonrepair follows JSON Schema $ref pointers in an unbounded while loop without any cycle detection. An attacker who can supply a schema containing a self-referencing $ref e.g., via the demo...

PT-2026-64221

Circular JSON Schema $ref causes unbounded CPU DoS in json repair Summary SchemaRepairer.resolve schema in json repair follows JSON Schema $ref pointers in an unbounded while loop without any cycle detection. An attacker who can supply a schema containing a self-referencing $ref e.g., via the dem...