CVE-2025-61301

CVE-2025-61301 - CAPEv2: Denial-Of-Analysis via Recursive Process Forking Description A High-Severity Denial-of-analysis vulnerability affects reporting/mongodb.py and reporting/jsondump.py in CAPEv2 commit 52e4b43, on 2025-05-17 allows attackers who can submit samples to cause incomplete or...

python313-orjson-3.11.9-1.4 on GA media (moderate)

python313-orjson-3.11.9-1.4 on GA media Announcement ID: openSUSE-SU-2026:12024-1 Rating: moderate Cross-References: CVE-2024-27454 CVSS scores: CVE-2024-27454 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability ca...

ROOT-APP-PYPI-CVE-2025-67221 CVE-2025-67221 in orjson - Patched by Root

Root has patched CVE-2025-67221 in the orjson package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-27454 CVE-2024-27454 in orjson - Patched by Root

Root has patched CVE-2024-27454 in the orjson package for Root:PyPI. Multiple fixed versions available...

OPENSUSE-SU-2026:12024-1 python313-orjson-3.11.9-1.4 on GA media

These are all security issues fixed in the python313-orjson-3.11.9-1.4 package on the GA media of openSUSE Tumbleweed...

PT-2026-105733

These are all security issues fixed in the python313-orjson-3.11.9-1.4 package on the GA media of openSUSE Tumbleweed...

CLSA-2026-1789553842 TuxCare security update for orjson (1 CVE)

TuxCare rebuilt orjson to address 1 CVE. Fixed in 3.8.5.post3+tuxcare...

PT-2026-99402

TuxCare rebuilt orjson to address 1 CVE. Fixed in 3.8.5.post3+tuxcare...

CLSA-2026-1787140595 TuxCare security update for orjson (1 CVE)

TuxCare rebuilt orjson to address 1 CVE. Fixed in 3.8.5.post2+tuxcare...

PT-2026-83459

TuxCare rebuilt orjson to address 1 CVE. Fixed in 3.8.5.post2+tuxcare...

CLSA-2025-1758759236 TuxCare security update for orjson (2 CVEs)

TuxCare rebuilt orjson to address 2 CVEs. Fixed in 3.8.5.post1+tuxcare...

PT-2026-73551

TuxCare rebuilt orjson to address 2 CVEs. Fixed in 3.8.5.post1+tuxcare...

[SECURITY] Fedora 44 Update: python-orjson-3.11.9-3.fc44

orjson is a fast, correct Python JSON library supporting dataclasses, datetimes, and numpy...

[SECURITY] Fedora 43 Update: python-orjson-3.11.9-3.fc43

orjson is a fast, correct Python JSON library supporting dataclasses, datetimes, and numpy...

Fedora 43 : python-orjson (2026-c8f1a4ee05)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c8f1a4ee05 advisory. Update PyO3 to 0.29, fixing RUSTSEC-2026-0194 and RUSTSEC-2026-0195. Tenable has extracted the preceding description block directly from the Fedora security...

Fedora 44 : python-orjson (2026-dd78d37ecf)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-dd78d37ecf advisory. Update PyO3 to 0.29, fixing RUSTSEC-2026-0194 and RUSTSEC-2026-0195. Tenable has extracted the preceding description block directly from the Fedora security...

GHSA-7MW3-79JQ-XC7F aiograpi has dependency on vulnerable orjson 3.11.4 (CVE-2025-67221)

Impact aiograpi 0.6.6 / 0.7.0 / 0.7.1 declared orjson==3.11.6 and later ==3.11.8 in requirements.txt but setup.py carried a hard-coded duplicate requirements = ... list that was never updated and still pinned orjson==3.11.4. When setuptools builds the source distribution it reads the metadata fro...

aiograpi has dependency on vulnerable orjson 3.11.4 (CVE-2025-67221)

Impact aiograpi 0.6.6 / 0.7.0 / 0.7.1 declared orjson==3.11.6 and later ==3.11.8 in requirements.txt but setup.py carried a hard-coded duplicate requirements = ... list that was never updated and still pinned orjson==3.11.4. When setuptools builds the source distribution it reads the metadata fro...

Security Bulletin: Multiple Vulnerabilities in IBM Engineering AI hub.

Summary Multiple vulnerabilities were addressed in IBM Engineering AI Hub version 1.2.0. Vulnerability Details CVEID:CVE-2026-0540 DESCRIPTION: DOMPurify 3.1.3 through 3.3.1 and 2.5.3 through 2.5.8, fixed in commit 2726c74, contain a cross-site scripting vulnerability that allows attackers to...

SUSE: Security Advisory (SUSE-SU-2026:20920-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...