Vulnerabilities

TI-2009-04680 CVE-2009-4924 · GHSA-95jp-77w6-qj52

Dan Pascu python-cjson 1.0.5 does not properly handle a ['/'] argument to cjson.encode…

LOW 23

Dan Pascu python-cjson 1.0.5 does not properly handle a ['/'] argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting (XSS) attacks involving Firefox and the end tag o…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01354 Published 2010-07-02 Fixed in 1.1.0 CWE-79

TI-2010-01609 CVE-2010-1666 · GHSA-cqmh-mpx2-g633

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows…

LOW 33

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors i…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01665 Published 2010-07-02 Fixed in 1.0.5.1 CWE-119

Vulnerabilities

Filters

Dan Pascu python-cjson 1.0.5 does not properly handle a ['/'] argument to cjson.encode…

Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows…