Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

python-cjson

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
PyPI

Advisories 2

  • Dan Pascu python-cjson 1.0.5 does not properly handle a ['/'] argument to cjson.encode, which makes it easier for remote attackers to…

    Affected: fixed in 1.1.0.

  • Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of…

    Affected: fixed in 1.0.5.1; fixed in 1.1.0.