Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors i…
CVSS 2.0MEDIUM 6.8·Network·No auth·Interaction —·EPSS 0.01665·Published 2010-07-02·Fixed in 1.0.5.1CWE-119
Dan Pascu python-cjson 1.0.5 does not properly handle a ['/'] argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting (XSS) attacks involving Firefox and the end tag o…
CVSS 2.0MEDIUM 4.3·Network·No auth·Interaction —·EPSS 0.01354·Published 2010-07-02·Fixed in 1.1.0CWE-79