Skip to content

Vendor

simplejson project vulnerabilities

1 published CVE affecting simplejson project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of simplejson project alerts

Products

Latest simplejson project CVEs

Newest publication first

  1. CVE-2014-4616 simplejson before 2.6.1 vulnerable to array index error

    Published
    MediumCVSS 5.9 EPSS 7.8%

    Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.