Workflow

PyPi: Orjson

CVE-2024-27454

Safety vulnerability ID: 67584

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Feb 26, 2024 Updated at Nov 23, 2024
Scan your Python projects for vulnerabilities →

Advisory

orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents.

Affected package

orjson

Latest version: 3.10.12

Fast, correct Python JSON library supporting dataclasses, datetimes, and numpy

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

Use this package?

Scan your Python project for dependency vulnerabilities in two minutes

Scan your application