CVE-2026-44660
2 advisories.
PyPI/ujson CVE-2026-44660: high 7.5, EPSS 0.64%
UltraJSON has a Memory Leak in ujson.dump() on Write Failure
Action: Upgrade ujson to 5.12.1 or later.
pip install ujson==5.12.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.12.1 | - |
Fixed versions
| 5.12.1 |
Sources
- osv: GHSA-c38f-wx89-p2xg
- https://github.com/ultrajson/ultrajson/security/advisories/GHSA-c38f-wx89-p2xg
- https://nvd.nist.gov/vuln/detail/CVE-2026-44660
- https://github.com/ultrajson/ultrajson/commit/82af1d0ac01d09aa40c887b460d44b9d9f4bccd9
- https://github.com/ultrajson/ultrajson
- https://github.com/ultrajson/ultrajson/releases/tag/5.12.1
CVE-2026-44660 · published · modified · JSON
PyPI/ujson CVE-2026-44660: high 7.5, EPSS 0.64%
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump() writes to a file-like object and the write operation raises an exceptio
Action: Upgrade ujson to 5.12.1 or later.
pip install ujson==5.12.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.12.1 | - |
Fixed versions
| 5.12.1 |
Sources
- osv: PYSEC-2026-2293
- https://github.com/ultrajson/ultrajson/releases/tag/5.12.1
- https://github.com/ultrajson/ultrajson/commit/82af1d0ac01d09aa40c887b460d44b9d9f4bccd9
- https://github.com/ultrajson/ultrajson/security/advisories/GHSA-c38f-wx89-p2xg
CVE-2026-44660 · published · modified · JSON