ultrajson vulnerabilities
6 published CVEs name ultrajson among the affected products.
- 6Published CVEs6 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-54911
UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()
ultrajson · ultrajson
Medium6.5 - CVE-2026-44660
UltraJSON: Memory Leak in ujson.dump() on Write Failure
ultrajson · ultrajson
High8.7 - CVE-2026-32875
UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop
ultrajson · ultrajson
High7.5 - CVE-2026-32874
UltraJSON has a Memory Leak parsing large integers allows DoS
ultrajson · ultrajson
High7.5 - CVE-2022-31116
Incorrect handling of invalid surrogate pair characters in ujson
ultrajson · ultrajson
High7.5 - CVE-2022-31117
Double free of buffer during string decoding in ujson
ultrajson · ultrajson
Medium5.9