Known vulnerabilities in ultrajson

Vendor: ultrajson
Software: ultrajson
Software CPE: cpe:2.3:a:ultrajson:ultrajson:*:*:*:*:*:*:*:*
Website: https://github.com/ultrajson/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ultrajson ultrajson is affected by 7 known vulnerabilities: 1 high, 6 medium Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134738 - Improper input validation
CVE-2026-54911		 CWE-20 Medium
No
No
 5.13.0 17.06.2026 SB2026061747
#VU130990 - Missing release of memory after effective lifetime
CVE-2026-44660		 CWE-401 Medium
No
No
 5.12.1 11.05.2026 SB2026051175
SB2026060950
SB2026073006
and 3 more
#VU128154 - Missing release of memory after effective lifetime
CVE-2026-32874		 CWE-401 Medium
No
No
 5.12.0 27.04.2026 SB20260427105
SB20260427108
SB2026042922
and 1 more
#VU128153 - Integer overflow
CVE-2026-32875		 CWE-190 Medium
No
No
 5.12.0 27.04.2026 SB20260427105
SB20260427108
SB2026042922
and 1 more
#VU64941 - Double Free
CVE-2022-31117		 CWE-415 High
No
No
 5.4.0 05.07.2022 SB2022070536
SB2022080433
SB2022120811
and 11 more
#VU64940 - Improper input validation
CVE-2022-31116		 CWE-20 Medium
No
No
 5.4.0 05.07.2022 SB2022070536
SB2022072110
SB2022080433
and 12 more
#VU61917 - Stack-based buffer overflow
CVE-2021-45958		 CWE-121 Medium
No
No
 5.2.0 06.04.2022 SB2022040606
SB2022041910
SB2023011262
and 9 more