| Package | Affected versions | Patched versions |
|---|---|---|
| simplejson | < 2.6.1 | 2.6.1 |
| python | ≥ 2.7.0, < 2.7.7≥ 3.0.0, < 3.2.6≥ 3.3.0, < 3.3.6≥ 3.4.0, < 3.4.1 | 2.7.73.2.63.3.63.4.1 |
| simplejson | < 2.6.1 | 2.6.1 |
Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free