VYPR

rpm package

suse/python-ujson&distro=SUSE Linux Enterprise Module for Development Tools 15 SP3

pkg:rpm/suse/python-ujson&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP3

Vulnerabilities (2)

  • CVE-2022-31116Jul 5, 2022
    affected < 1.35-150100.3.5.1fixed 1.35-150100.3.5.1

    UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Affected versions were found to improperly decode certain characters. JSON strings that contain escaped surrogate characters not part of a proper surrogate pair were decoded incorrectly.

  • CVE-2022-31117Jul 5, 2022
    affected < 1.35-150100.3.5.1fixed 1.35-150100.3.5.1

    UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string decoding can cause the buffer to get freed twice. Due to how UltraJSON uses the internal decoder, thi