What’s Vulnerable › Products

ultrajson vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your ultrajson version is affected

Latest ultrajson vulnerabilities

• CVE-2026-54911 — UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps() (CVSS 6.5)
• CVE-2026-44660 — UltraJSON: Memory Leak in ujson.dump() on Write Failure (CVSS 7.5)
• CVE-2026-32875 — UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop (CVSS 7.5)
• CVE-2026-32874 — UltraJSON has a Memory Leak parsing large integers allows DoS (CVSS 7.5)
• CVE-2022-31117 — Double free of buffer during string decoding in ujson (CVSS 5.9)
• CVE-2022-31116 — Incorrect handling of invalid surrogate pair characters in ujson (CVSS 7.5)
• CVE-2021-45958 — (CVSS 5.5)