View all vulnerabilities

CVE-2024-27454

Description

orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents.
Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Fix without upgrading
Vulnerability Details
Score
Score Vector
Affected Versions
orjson < b0e4d2c06ce06c6e63981bf0276e4b7c74e5845e; orjson < 3.9.15
Severity
Ecosystem
Python
Publish Date
February 26, 2024
Modified Date
February 26, 2024