64 matches found
CVE-2025-61301
CVE-2025-61301 — CAPEv2: отказ в анализе через рекурсивное порождение процессов Описание Уязвимость высокой степени серьезности , приводящая к отказу в анализе, затрагивает reporting/mongodb.py и reporting/jsondump.py в CAPEv2 коммит 52e4b43, 17 мая 2025 г. и позволяет злоумышленникам, которые...
ROOT-APP-PYPI-CVE-2024-27454 CVE-2024-27454 in orjson - Patched by Root
Root has patched CVE-2024-27454 in the orjson package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2025-67221 CVE-2025-67221 in orjson - Patched by Root
Root has patched CVE-2025-67221 in the orjson package for Root:PyPI. Multiple fixed versions available...
CLSA-2026-1789553842 TuxCare security update for orjson (1 CVE)
TuxCare rebuilt orjson to address 1 CVE. Fixed in 3.8.5.post3+tuxcare...
CLSA-2026-1787140595 TuxCare security update for orjson (1 CVE)
TuxCare rebuilt orjson to address 1 CVE. Fixed in 3.8.5.post2+tuxcare...
CLSA-2025-1758759236 TuxCare security update for orjson (2 CVEs)
TuxCare rebuilt orjson to address 2 CVEs. Fixed in 3.8.5.post1+tuxcare...
[SECURITY] Fedora 44 Update: python-orjson-3.11.9-3.fc44
orjson is a fast, correct Python JSON library supporting dataclasses, datetimes, and numpy...
[SECURITY] Fedora 43 Update: python-orjson-3.11.9-3.fc43
orjson is a fast, correct Python JSON library supporting dataclasses, datetimes, and numpy...
aiograpi has dependency on vulnerable orjson 3.11.4 (CVE-2025-67221)
Impact aiograpi 0.6.6 / 0.7.0 / 0.7.1 declared orjson==3.11.6 and later ==3.11.8 in requirements.txt but setup.py carried a hard-coded duplicate requirements = ... list that was never updated and still pinned orjson==3.11.4. When setuptools builds the source distribution it reads the metadata fro...
GHSA-7MW3-79JQ-XC7F aiograpi has dependency on vulnerable orjson 3.11.4 (CVE-2025-67221)
Impact aiograpi 0.6.6 / 0.7.0 / 0.7.1 declared orjson==3.11.6 and later ==3.11.8 in requirements.txt but setup.py carried a hard-coded duplicate requirements = ... list that was never updated and still pinned orjson==3.11.4. When setuptools builds the source distribution it reads the metadata fro...
Security Bulletin: Multiple Vulnerabilities in IBM Engineering AI hub.
Summary Multiple vulnerabilities were addressed in IBM Engineering AI Hub version 1.2.0. Vulnerability Details CVEID:CVE-2026-0540 DESCRIPTION: DOMPurify 3.1.3 through 3.3.1 and 2.5.3 through 2.5.8, fixed in commit 2726c74, contain a cross-site scripting vulnerability that allows attackers to...
SUSE: Security Advisory (SUSE-SU-2026:20920-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Maximo AI Service uses multiple third party dependencies which is vulnerable to multiple CVEs.
Summary Maximo AI Service uses wheel-0.41.3-py3-none-any.whl, orjson-3.10.14-cp311-cp311-manylinux217x8664.manylinux2014x8664.whl, pythonmultipart-0.0.21-py3-none-any.whl, pyasn1-0.6.1.tar.gz, sentencepiece-0.2.0-cp311-cp311-manylinux217x8664.manylinux2014x8664.whl, tar-7.4.3.tgz, tar-7.5.2.tgz...
Security update for python-orjson (moderate)
openSUSE security update: security update for python-orjson ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20407-1 Rating: moderate References: bsc1257121 Cross-References: CVE-2025-67221 CVSS scores: CVE-2025-67221 SUSE : 5.9...
OPENSUSE-SU-2026:20407-1 Security update for python-orjson
This update for python-orjson fixes the following issues: - CVE-2025-67221: Fixed write outsize of allocated memory on json dump bsc1257121...
SUSE-SU-2026:20920-1 Security update for python-orjson
This update for python-orjson fixes the following issues: - CVE-2025-67221: Fixed write outsize of allocated memory on json dump bsc1257121...
Denial Of Service (DoS)
orjson is vulnerable to a Denial-Of-Service DoS. The vulnerability is due to missing recursion depth limits in orjson.dumps, where deeply nested JSON inputs can cause excessive recursion, leading to stack exhaustion and process crashes...
CVE-2025-67221
The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents...
