{"id":"CVE-2023-26819","aliases":["AZL-60883","AZL-60889","DEBIAN-CVE-2023-26819","DLA-4216-1","EUVD-2023-30611","GHSA-whx8-2789-8w4w","OESA-2025-1965","OESA-2025-1992","OESA-2025-1993","OESA-2025-1994","OESA-2025-1995","SUSE-SU-2025:03520-1","UBUNTU-CVE-2023-26819","USN-7973-1","openSUSE-SU-2025:15583-1","openSUSE-SU-2026:20340-1"],"status":"published","title":"cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {\"a\": true, \"b\":...","description":"cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {\"a\": true, \"b\": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.","severity":{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00234,"percentile":0.14471,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-440"],"published":"2025-04-19T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"libglvnd","fixed_in":["1.7.0-3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"cjson","fixed_in":["1.7.15-1+deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cjson","fixed_in":["1.7.18-3.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cjson","fixed_in":["1.7.18-3.1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"cjson","fixed_in":["1.7.15-6.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"cjson","fixed_in":["1.7.15-10.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"cjson","fixed_in":["1.7.15-6.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"cjson","fixed_in":["1.7.15-10.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"cjson","fixed_in":["1.7.15-10.oe2403sp1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"cjson","fixed_in":["1.7.10-1.1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"cjson","fixed_in":["1.7.15-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"cjson","fixed_in":["1.7.17-1ubuntu0.1~esm3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"18.2.2-13"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libglvnd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.15-1+deb12u3"}]}],"versions":["1.7.15-1","1.7.15-1+deb12u1","1.7.15-1+deb12u2"]},{"source":"osv","ecosystem":"Debian:13","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.18-3.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.18-3.1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.14-1+deb11u2"}]}],"versions":["1.7.14-1","1.7.14-1+deb11u1"],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.15-6.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.15-10.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.15-6.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.15-10.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.15-10.oe2403sp1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"cJSON","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.19-150700.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.10-1.1ubuntu0.1~esm1"}]}],"versions":["1.7.10-1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.15-1ubuntu0.1"}]}],"versions":["1.7.14-1","1.7.15-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.17-1ubuntu0.1~esm3"}]}],"versions":["1.7.16-1","1.7.16-2","1.7.17-1","1.7.17-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.10-1.1ubuntu0.1~esm1"}]}],"versions":["1.7.10-1.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.15-1ubuntu0.1"}]}],"versions":["1.7.14-1","1.7.15-1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.17-1ubuntu0.1~esm3"}]}],"versions":["1.7.16-1","1.7.16-2","1.7.17-1","1.7.17-1ubuntu0.1~esm2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.18-3.1ubuntu0.1"}]}],"versions":["1.7.18-3","1.7.18-3.1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cJSON","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.19-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"cJSON","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.19-160000.1.1"}]}],"bundled":2}],"products":[{"vendor":"cjson project","product":"cjson"},{"vendor":"cjson_project","product":"cjson"}],"references":[{"url":"https://github.com/boofish/json_bugs/tree/main/cjson","tags":["Exploit","Third Party Advisory","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/06/msg00014.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26819","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-whx8-2789-8w4w"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/26xxx/CVE-2023-26819.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-26819","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1965","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1992","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1993","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1994","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1995","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503520-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1241502","tags":["report"]},{"url":"https://bugzilla.suse.com/1249112","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-26819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-57052","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-26819","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-26819","tags":["report"]},{"url":"https://github.com/DaveGamble/cJSON/commit/a328d65ad490b64da8c87523cbbfe16050ba5bf6","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7973-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-53154","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-57052","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-26819","description":"cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {\"a\": true, \"b\": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.","status":"published","published":"2025-04-19T00:00:00Z","modified":"2025-11-03T19:28:10.065Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-440"],"updated_at":"2026-11-02T14:35:15.779187Z"}],"euvd":[{"id":"EUVD-2023-30611","description":"cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {\"a\": true, \"b\": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.","status":"published","published":"2025-04-19T00:00:00Z","modified":"2025-11-03T19:28:10Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T19:49:34.152725Z"}],"ghsa":[{"id":"GHSA-whx8-2789-8w4w","title":"cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {\"a\": true, \"b\":...","description":"cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {\"a\": true, \"b\": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.","status":"published","published":"2025-04-20T00:31:40Z","modified":"2025-11-03T21:34:44Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-440"],"updated_at":"2026-11-02T15:04:24.938946Z"}],"nvd":[{"id":"CVE-2023-26819","description":"cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {\"a\": true, \"b\": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.","status":"published","published":"2025-04-19T22:15:14.103Z","modified":"2026-06-17T05:43:50.84Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"}],"cwes":["CWE-440"],"updated_at":"2026-11-02T14:09:21.774456Z"}],"osv":[{"id":"CVE-2023-26819","description":"cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {\"a\": true, \"b\": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.","status":"published","published":"2025-04-19T00:00:00Z","modified":"2026-10-28T02:30:26.101929058Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-440"],"updated_at":"2026-11-02T15:44:31.135751Z"},{"id":"DEBIAN-CVE-2023-26819","description":"cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {\"a\": true, \"b\": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.","status":"published","published":"2025-04-19T22:15:14.103Z","modified":"2026-10-26T18:02:12.703732497Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"OESA-2025-1965","title":"cjson security update","description":"cJSON aims to be the dumbest possible parser that you can get your job done with. It\u0026amp;apos;s a single file of C, and a single header file.   %package devel Summary:        Development files for cJSON Requires:        = - Requires:       pkgconfig    %description devel The cjson-devel package contains libraries and header files for developing applications that use cJSON.    %prep %autosetup -n cJSON-\r\n\r\nSecurity Fix(es):\n\ncJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {\u0026quot;a\u0026quot;: true, \u0026quot;b\u0026quot;: [ null,9999999999999999999999999999999999999999999999912345678901234567]}.(CVE-2023-26819)","status":"published","published":"2025-08-08T11:09:03Z","modified":"2026-08-18T01:18:56.461483625Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1992","title":"cjson security update","description":"cJSON aims to be the dumbest possible parser that you can get your job done with. It\u0026amp;apos;s a single file of C, and a single header file.   %package devel Summary:        Development files for cJSON Requires:        = - Requires:       pkgconfig    %description devel The cjson-devel package contains libraries and header files for developing applications that use cJSON.    %prep %autosetup -n cJSON-\r\n\r\nSecurity Fix(es):\n\ncJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {\u0026quot;a\u0026quot;: true, \u0026quot;b\u0026quot;: [ null,9999999999999999999999999999999999999999999999912345678901234567]}.(CVE-2023-26819)","status":"published","published":"2025-08-15T11:09:04Z","modified":"2026-08-18T01:18:57.153466228Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1993","title":"cjson security update","description":"cJSON aims to be the dumbest possible parser that you can get your job done with. It\u0026amp;apos;s a single file of C, and a single header file.   %package devel Summary:        Development files for cJSON Requires:        = - Requires:       pkgconfig    %description devel The cjson-devel package contains libraries and header files for developing applications that use cJSON.    %prep %autosetup -n cJSON-\r\n\r\nSecurity Fix(es):\n\ncJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {\u0026quot;a\u0026quot;: true, \u0026quot;b\u0026quot;: [ null,9999999999999999999999999999999999999999999999912345678901234567]}.(CVE-2023-26819)","status":"published","published":"2025-08-15T11:09:04Z","modified":"2026-08-18T01:18:57.105140845Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1994","title":"cjson security update","description":"cJSON aims to be the dumbest possible parser that you can get your job done with. It\u0026amp;apos;s a single file of C, and a single header file.   %package devel Summary:        Development files for cJSON Requires:        = - Requires:       pkgconfig    %description devel The cjson-devel package contains libraries and header files for developing applications that use cJSON.    %prep %autosetup -n cJSON-\r\n\r\nSecurity Fix(es):\n\ncJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {\u0026quot;a\u0026quot;: true, \u0026quot;b\u0026quot;: [ null,9999999999999999999999999999999999999999999999912345678901234567]}.(CVE-2023-26819)","status":"published","published":"2025-08-15T11:09:04Z","modified":"2026-08-18T01:18:57.130094982Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1995","title":"cjson security update","description":"cJSON aims to be the dumbest possible parser that you can get your job done with. It\u0026amp;apos;s a single file of C, and a single header file.   %package devel Summary:        Development files for cJSON Requires:        = - Requires:       pkgconfig    %description devel The cjson-devel package contains libraries and header files for developing applications that use cJSON.    %prep %autosetup -n cJSON-\r\n\r\nSecurity Fix(es):\n\ncJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {\u0026quot;a\u0026quot;: true, \u0026quot;b\u0026quot;: [ null,9999999999999999999999999999999999999999999999912345678901234567]}.(CVE-2023-26819)","status":"published","published":"2025-08-15T11:09:04Z","modified":"2026-08-18T01:18:57.109309745Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"UBUNTU-CVE-2023-26819","description":"cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {\"a\": true, \"b\": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.","status":"published","published":"2025-04-19T22:15:00Z","modified":"2026-04-22T14:04:19.65384Z","cvss":[{"version":"3.1","score":2.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T16:54:20.198616Z"},{"id":"AZL-60883","title":"CVE-2023-26819 affecting package ceph 18.2.2-13","description":"cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {\"a\": true, \"b\": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.","status":"published","published":"2025-04-19T22:15:14Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.344052Z"},{"id":"AZL-60889","title":"CVE-2023-26819 affecting package libglvnd for versions less than 1.7.0-3","description":"cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {\"a\": true, \"b\": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.","status":"published","published":"2025-04-19T22:15:14Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.344052Z"},{"id":"DLA-4216-1","title":"cjson - security update","status":"published","published":"2025-06-15T00:00:00Z","modified":"2026-03-09T01:22:53.284941Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"openSUSE-SU-2025:15583-1","title":"cJSON-devel-1.7.19-1.1 on GA media","description":"These are all security issues fixed in the cJSON-devel-1.7.19-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-09-29T00:00:00Z","modified":"2026-03-23T04:53:58.240612Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2026:20340-1","title":"Security update for cJSON","description":"This update for cJSON fixes the following issues:\n\n- Update to version 1.7.19\n  * Check for NULL in cJSON_DetachItemViaPointer.\n  * Check overlap before calling strcpy in cJSON_SetValuestring.\n  * Fix Max recursion depth for cJSON_Duplicate to prevent stack\n    exhaustion.\n  * Allocate memory for the temporary buffer when paring numbers.\n    This fixes CVE-2023-26819. (bsc#1241502)\n  * Fix the incorrect check in decode_array_index_from_pointer.\n    This fixes CVE-2025-57052. (bsc#1249112)\n- Remove not longer needed patch for NULL to deallocated pointers.\n\n","status":"published","published":"2026-03-11T08:21:26Z","modified":"2026-03-23T04:54:51.385572Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2025:03520-1","title":"Security update for cJSON","description":"This update for cJSON fixes the following issues:\n\n- CVE-2023-26819: Allocate memory for the temporary buffer when paring numbers (bsc#1241502)\n- CVE-2025-57052: Fix the incorrect check in decode_array_index_from_pointer (bsc#1249112)\n","status":"published","published":"2025-10-10T07:22:44Z","modified":"2026-02-04T04:07:23.805289Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"USN-7973-1","title":"cjson vulnerabilities","description":"It was discovered that cJSON incorrectly handled parsing large numbers. An\nattacker could possibly use this issue to cause a denial of service.\n(CVE-2023-26819)\n\nIt was discovered that cJSON may perform out-of-bounds read when processing\nspecially crafted JSON files using parse_object. An attacker could possibly\nuse this issue to expose sensitive information or crash the program.\n(CVE-2023-53154)\n\nIt was discovered that cJSON incorrectly validated array indices in JSON\npointers, which could result in an out-of-bounds memory access. An attacker\ncould possibly use this issue to cause a denial of service, or execute\narbitrary code. (CVE-2025-57052)","status":"published","published":"2026-01-23T04:53:55Z","modified":"2026-04-27T18:34:23.159999Z","updated_at":"2026-11-02T16:58:22.951676Z"}]}}