Ultrajson Project vulnerabilities

Products

• Ultrajson 7

Newest

• ultrajson UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps() CVE-2026-54911 Fix available 6.5 MediumJune 19, 2026
• ultrajson UltraJSON: Memory Leak in ujson.dump() on Write Failure CVE-2026-44660 Fix available 8.7 HighMay 12, 2026
• ultrajson, red hat openstack platform 16.2, openstack platform 17.1 +1 more +3 more UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop CVE-2026-32875 Fix available 7.5 HighMarch 18, 2026
• ultrajson, red hat openstack platform 16.2, openstack platform 17.1 +1 more +3 more UltraJSON has a Memory Leak parsing large integers allows DoS CVE-2026-32874 Fix available 7.5 HighMarch 18, 2026
• ultrajson, fedoraproject fedora +1 more Incorrect handling of invalid surrogate pair characters in ujson CVE-2022-31116 Fix available 7.5 HighJuly 5, 2022
• ultrajson, fedoraproject fedora +1 more Double free of buffer during string decoding in ujson CVE-2022-31117 Fix available 5.9 MediumJuly 5, 2022
• ultrajson project ultrajson, debian linux, fedoraproject fedora +2 more UltraJSON vulnerable to Out-of-bounds Write CVE-2021-45958 Fix available 5.5 MediumDecember 31, 2021