Skip to content
DDaveGamble
Products
| Product | CVEs | Exploited | Latest |
| cJSON | 6 | – | Sep 10, 2026 |
Exploited and recent CVEs
-
CVE-2026-87933
High 7.3
DaveGamble cJSON cJSON_Utils.c cJSONUtils_MergePatch use after free
0.5%
-
CVE-2026-29036
High 7.5
cJSON 1.7.19 Wrong-Key Modification via JSON Pointer Escape Decoding
0.4%
-
CVE-2026-67217
Medium 5.3
cJSON JSON Patch Non-Atomic Application Destroys Data Before Validation
0.4%
-
CVE-2026-67216
Medium 5.9
cJSON cJSON_Compare Exponential Complexity Denial of Service
0.6%
-
CVE-2026-67215
High 7.5
cJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion
0.7%
-
CVE-2026-16554
Medium 5.1
Integer Overflow Leading to Heap Buffer Overflow in cJSON
0.4%