VYPR

rpm package

opensuse/python-ujson&distro=openSUSE Leap 15.3

pkg:rpm/opensuse/python-ujson&distro=openSUSE%20Leap%2015.3

Vulnerabilities (2)

  • CVE-2022-31116Jul 5, 2022
    affected < 1.35-150100.3.5.1fixed 1.35-150100.3.5.1

    UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Affected versions were found to improperly decode certain characters. JSON strings that contain escaped surrogate characters not part of a proper surrogate pair were decoded incorrectly.

  • CVE-2022-31117Jul 5, 2022
    affected < 1.35-150100.3.5.1fixed 1.35-150100.3.5.1

    UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string decoding can cause the buffer to get freed twice. Due to how UltraJSON uses the internal decoder, thi