Orjson

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-67221 Jan 22, 17:16 PyPI HIGH POC PATCH GHSA This Week

The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents. [CVSS 7.5 HIGH]

Denial Of Service Red Hat Orjson Suse

NVD GitHub

CVSS 3.1

7.5

EPSS

0.1%

CVE-2024-27454 Feb 26, 16:28 PyPI HIGH POC PATCH This Week

orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Orjson

NVD GitHub

CVSS 3.1

7.5

EPSS

1.2%

CVE-2025-67221 PyPI

EPSS 0% CVSS 7.5

HIGH POC PATCH This Week

The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents. [CVSS 7.5 HIGH]

Denial Of Service Red Hat Orjson +1

NVD GitHub

CVE-2024-27454 PyPI

EPSS 1% CVSS 7.5

HIGH POC PATCH This Week

orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Orjson

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy