{"action":"Upgrade python-cjson to 1.1.0 or later.","affected":[{"fixed":"1.1.0","introduced":"0"}],"component":"python-cjson","cve_ids":["CVE-2010-1666"],"ecosystem":"PyPI","epss":0.01665,"exploited":false,"fixed_versions":["1.1.0"],"ghsa_id":"GHSA-cqmh-mpx2-g633","id":"tcs_01M5KG5DC3RMXC5RJ5NPF7XSBY","modified_at":"2023-11-08T03:56:55.969118Z","published_at":"2010-07-02T19:00:00Z","references":["https://osv.dev/vulnerability/PYSEC-2010-30","http://secunia.com/advisories/40335","https://bugs.launchpad.net/ubuntu/+source/python-cjson/+bug/585274","http://www.vupen.com/english/advisories/2010/1774","http://www.debian.org/security/2010/dsa-2068","http://secunia.com/advisories/40500","https://github.com/advisories/GHSA-cqmh-mpx2-g633"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2010-30","url":"https://osv.dev/vulnerability/PYSEC-2010-30"}],"summary":"Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other"}