ujson@4.1.0 vulnerabilities
Ultra fast JSON encoder and decoder for Python
latest version
5.10.0
latest non vulnerable version
first published
13 years ago
latest version published
7 months ago
licenses detected
- [0,)
Direct Vulnerabilities
Known vulnerabilities in the ujson package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
ujson is an Ultra fast JSON encoder and decoder for Python Affected versions of this package are vulnerable to Improper Handling of Syntactically Invalid Structure due to incorrect decoding of JSON strings that contain escaped surrogate characters that are not part of a proper surrogate pair. This allows data corruption, and therefore impacts the integrity of the target application, as well as potentially impacting the availability of dictionary data. How to fix Improper Handling of Syntactically Invalid Structure? Upgrade | [,5.4.0) |
ujson is an Ultra fast JSON encoder and decoder for Python Affected versions of this package are vulnerable to Double Free on string decoding, if NOTE: According to the maintainer, this issue is "impossible to trigger from Python". How to fix Double Free? Upgrade | [,5.4.0) |
ujson is an Ultra fast JSON encoder and decoder for Python Affected versions of this package are vulnerable to Out-of-Bounds Write via a stack-based buffer overflow in How to fix Out-of-Bounds Write? Upgrade | [1.34,5.2.0) |