ultrajson

Products

ProductCVEsExploitedLatest
ultrajson6–Jun 22, 2026

Exploited and recent CVEs

  • CVE-2026-54911 Medium 6.5 UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps() 0.4%
  • CVE-2026-44660 High 8.7 UltraJSON: Memory Leak in ujson.dump() on Write Failure 0.4%
  • CVE-2026-32875 High 7.5 UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop 0.5%
  • CVE-2026-32874 High 7.5 UltraJSON has a Memory Leak parsing large integers allows DoS 0.5%
  • CVE-2022-31116 High 7.5 Incorrect handling of invalid surrogate pair characters in ujson 2.5%
  • CVE-2022-31117 Medium 5.9 Double free of buffer during string decoding in ujson 1.9%