PyPI/ujson CVE-2026-44660: high 7.5, EPSS 0.42%
UltraJSON has a Memory Leak in ujson.dump() on Write Failure
Action: Upgrade ujson to 5.12.1 or later.
pip install ujson==5.12.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.12.1 | - |
Fixed versions
| 5.12.1 |
Sources
- osv: GHSA-c38f-wx89-p2xg
- https://github.com/ultrajson/ultrajson/security/advisories/GHSA-c38f-wx89-p2xg
- https://nvd.nist.gov/vuln/detail/CVE-2026-44660
- https://github.com/ultrajson/ultrajson/commit/82af1d0ac01d09aa40c887b460d44b9d9f4bccd9
- https://github.com/ultrajson/ultrajson
- https://github.com/ultrajson/ultrajson/releases/tag/5.12.1
CVE-2026-44660 · published · modified · JSON