Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
orjson library can cause crashes with very deep data
published 6 months ago
Summary
Applications that use the orjson library to turn information into JSON text can stop working if the information is organized in many layers. This can lead to the program running out of memory or freezing. Updating to the latest version of the library (3.11.6 or newer) or avoiding excessively layered data solves the problem.
What to do
- Update orjson to version 3.10.18+echo.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| PyPI | – | orjson |
< 3.10.18+echo.1 Fix: upgrade to 3.10.18+echo.1
|
Original advisory text
ECHO-7f2f-e83a-5508
References
Timeline
Published14 Apr 2026
Updated14 Apr 2026
First seen14 Apr 2026
Sources
ECHO-7f2f-e83a-5508 · OSV
Track software like this
Free during beta