Debian/ujson: medium 6.5
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.13.0, ujson.dumps() (or ujson.dump() or ujson.encode()) have a reject_bytes=False option. When
Action: Upgrade ujson to 5.13.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.13.0-1 | - |
Fixed versions
| 5.13.0-1 |
Sources
- osv: DEBIAN-CVE-2026-54911#Debian:14/ujson
- https://security-tracker.debian.org/tracker/CVE-2026-54911
published · modified · JSON