| Package | Affected versions | Patched versions |
|---|---|---|
| ujson | ≥ 1.34, < 5.2.0≥ 4.0.2, < 5.1.0 | 5.2.05.1.0 |
| ultrajson | < 5.2.0 | 5.2.0 |
UltraJSON (aka ujson) 1.34 through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free