Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Ijl records in CISA KEVNo Ijl vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 72
The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00633 · Published 2026-01-22 · Partial fix · 3.11.6 CWE-770
Priority MEDIUM 41
orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01187 · Published 2024-02-26 · Fixed in 3.9.15 CWE-674
Open these records in search →