What’s Vulnerable › Vulnerabilities

CVE-2023-26819

• Severity: low (CVSS 2.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-04-19 · updated 2026-06-17
• Weakness: CWE-440

Description

cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.

Affected products

• cJSON project cJSON: 1.7.15

References

• https://github.com/boofish/json_bugs/tree/main/cjson
• https://lists.debian.org/debian-lts-announce/2025/06/msg00014.html

Get alerted when CVE-2023-26819 or the next vulnerability affects your stack