Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
py3-ujson may allow crafted data to cause crashes
published 4 days ago
Summary
The py3-ujson package, which provides fast JSON processing for Python, has a flaw that can be triggered by specially crafted JSON input. This could cause the application to stop working or behave unpredictably, potentially affecting services that rely on it. Update to a patched version or replace the package with a secure alternative as soon as possible.
What to do
- Update cleanstart py3-ujson to version 5.4.0-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | py3-ujson |
< 5.4.0-r0 Fix: upgrade to 5.4.0-r0
|
Original advisory text
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3
Security vulnerability affects the py3-ujson package. UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2024-UD89809 · OSV
Track software like this
Free during beta