{"action":"Upgrade ujson to 5.1.0 or later.","affected":[{"fixed":"5.1.0","introduced":"4.0.2"}],"component":"ujson","cve_ids":["CVE-2021-45958"],"ecosystem":"PyPI","epss":0.01667,"exploited":false,"fixed_versions":["5.1.0"],"ghsa_id":"GHSA-fh56-85cw-5pq6","id":"tcs_01M5KGGS57SWPQ00TTD34P674Q","modified_at":"2023-11-08T04:07:24.600926Z","published_at":"2022-01-01T00:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-25","https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ujson/OSV-2021-955.yaml","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36009","https://github.com/ultrajson/ultrajson/issues/501","https://github.com/ultrajson/ultrajson/issues/502#issuecomment-1031747284","https://github.com/advisories/GHSA-fh56-85cw-5pq6"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-25","url":"https://osv.dev/vulnerability/PYSEC-2022-25"}],"summary":"UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use a large amount of indentation."}