{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"High" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"python-ujson security update", "category":"general", "title":"Synopsis" }, { "text":"An update for python-ujson is now available for openEuler-20.03-LTS-SP4", "category":"general", "title":"Summary" }, { "text":"UltraJSON\n\nSecurity Fix(es):\n\nUltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use a large amount of indentation.(CVE-2021-45958)\n\nUltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Affected versions were found to improperly decode certain characters. JSON strings that contain escaped surrogate characters not part of a proper surrogate pair were decoded incorrectly. Besides corrupting strings, this allowed for potential key confusion and value overwriting in dictionaries. All users parsing JSON from untrusted sources are vulnerable. From version 5.4.0, UltraJSON decodes lone surrogates in the same way as the standard library's `json` module does, preserving them in the parsed output. Users are advised to upgrade. There are no known workarounds for this issue.(CVE-2022-31116)\n\nUltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string decoding can cause the buffer to get freed twice. Due to how UltraJSON uses the internal decoder, this double free is impossible to trigger from Python. This issue has been resolved in version 5.4.0 and all users should upgrade to UltraJSON 5.4.0. There are no known workarounds for this issue.(CVE-2022-31117)\n\nUltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump() writes to a file-like object and the write operation raises an exception, the serialized JSON string object is not decremented, leaking memory. Each failed write operation leaks the full size of the serialized payload. This vulnerability is fixed in 5.12.1.(CVE-2026-44660)\n\nUltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.13.0, ujson.dumps() (or ujson.dump() or ujson.encode()) have a reject_bytes=False option. When set, they may accept malformed or truncated UTF-8 byte sequences, silently rewriting them into different Unicode characters instead of rejecting them. This leads to input validation bypass and data integrity issues. This vulnerability is fixed in 5.13.0.(CVE-2026-54911)", "category":"general", "title":"Description" }, { "text":"An update for python-ujson is now available for openEuler-20.03-LTS-SP4/openEuler-24.03-LTS/openEuler-24.03-LTS-Next/openEuler-24.03-LTS-SP1/openEuler-24.03-LTS-SP3/openEuler-24.03-LTS-SP4.\n\nopenEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.", "category":"general", "title":"Topic" }, { "text":"High", "category":"general", "title":"Severity" }, { "text":"python-ujson", "category":"general", "title":"Affected Component" } ], "publisher":{ "issuing_authority":"openEuler security committee", "name":"openEuler", "namespace":"https://www.openeuler.org", "contact_details":"openeuler-security@openeuler.org", "category":"vendor" }, "references":[ { "summary":"openEuler-SA-2026-3606", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3606" }, { "summary":"CVE-2021-45958", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2021-45958&packageName=python-ujson" }, { "summary":"CVE-2022-31116", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2022-31116&packageName=python-ujson" }, { "summary":"CVE-2022-31117", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2022-31117&packageName=python-ujson" }, { "summary":"CVE-2026-44660", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-44660&packageName=python-ujson" }, { "summary":"CVE-2026-54911", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-54911&packageName=python-ujson" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2021-45958" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31116" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31117" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44660" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54911" }, { "summary":"openEuler-SA-2026-3606 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/advisories/2026/csaf-openeuler-sa-2026-3606.json" } ], "title":"An update for python-ujson is now available for openEuler-20.03-LTS-SP4", "tracking":{ "initial_release_date":"2026-09-09T18:23:36+08:00", "revision_history":[ { "date":"2026-09-09T18:23:36+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2026-09-09T18:23:36+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2026-09-09T18:23:36+08:00", "id":"openEuler-SA-2026-3606", "version":"1.0.0", "status":"final" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"openEuler-20.03-LTS-SP4", "name":"openEuler-20.03-LTS-SP4" }, "name":"openEuler-20.03-LTS-SP4", "category":"product_version" } ], "category":"product_name" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python-ujson-4.0.2-3.oe2003sp4.src.rpm", "name":"python-ujson-4.0.2-3.oe2003sp4.src.rpm" }, "name":"python-ujson-4.0.2-3.oe2003sp4.src.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"aarch64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64.rpm", "name":"python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64.rpm" }, "name":"python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64.rpm", "name":"python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64.rpm" }, "name":"python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python-ujson-help-4.0.2-3.oe2003sp4.aarch64.rpm", "name":"python-ujson-help-4.0.2-3.oe2003sp4.aarch64.rpm" }, "name":"python-ujson-help-4.0.2-3.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python3-ujson-4.0.2-3.oe2003sp4.aarch64.rpm", "name":"python3-ujson-4.0.2-3.oe2003sp4.aarch64.rpm" }, "name":"python3-ujson-4.0.2-3.oe2003sp4.aarch64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64.rpm", "name":"python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64.rpm" }, "name":"python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64.rpm", "name":"python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64.rpm" }, "name":"python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python-ujson-help-4.0.2-3.oe2003sp4.x86_64.rpm", "name":"python-ujson-help-4.0.2-3.oe2003sp4.x86_64.rpm" }, "name":"python-ujson-help-4.0.2-3.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python3-ujson-4.0.2-3.oe2003sp4.x86_64.rpm", "name":"python3-ujson-4.0.2-3.oe2003sp4.x86_64.rpm" }, "name":"python3-ujson-4.0.2-3.oe2003sp4.x86_64.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python-ujson-4.0.2-3.oe2003sp4.src.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python-ujson-4.0.2-3.oe2003sp4.src", "name":"python-ujson-4.0.2-3.oe2003sp4.src as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64", "name":"python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64", "name":"python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python-ujson-help-4.0.2-3.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.aarch64", "name":"python-ujson-help-4.0.2-3.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python3-ujson-4.0.2-3.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.aarch64", "name":"python3-ujson-4.0.2-3.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64", "name":"python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64", "name":"python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python-ujson-help-4.0.2-3.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.x86_64", "name":"python-ujson-help-4.0.2-3.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python3-ujson-4.0.2-3.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.x86_64", "name":"python3-ujson-4.0.2-3.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2021-45958", "notes":[ { "text":"UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use a large amount of indentation.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:python-ujson-4.0.2-3.oe2003sp4.src", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:python-ujson-4.0.2-3.oe2003sp4.src", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.x86_64" ], "details":"python-ujson security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3606" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.5, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:python-ujson-4.0.2-3.oe2003sp4.src", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2021-45958" }, { "cve":"CVE-2022-31116", "notes":[ { "text":"UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Affected versions were found to improperly decode certain characters. JSON strings that contain escaped surrogate characters not part of a proper surrogate pair were decoded incorrectly. Besides corrupting strings, this allowed for potential key confusion and value overwriting in dictionaries. All users parsing JSON from untrusted sources are vulnerable. From version 5.4.0, UltraJSON decodes lone surrogates in the same way as the standard library's `json` module does, preserving them in the parsed output. Users are advised to upgrade. There are no known workarounds for this issue.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:python-ujson-4.0.2-3.oe2003sp4.src", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:python-ujson-4.0.2-3.oe2003sp4.src", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.x86_64" ], "details":"python-ujson security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3606" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.5, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:python-ujson-4.0.2-3.oe2003sp4.src", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.x86_64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2022-31116" }, { "cve":"CVE-2022-31117", "notes":[ { "text":"UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string decoding can cause the buffer to get freed twice. Due to how UltraJSON uses the internal decoder, this double free is impossible to trigger from Python. This issue has been resolved in version 5.4.0 and all users should upgrade to UltraJSON 5.4.0. There are no known workarounds for this issue.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:python-ujson-4.0.2-3.oe2003sp4.src", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:python-ujson-4.0.2-3.oe2003sp4.src", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.x86_64" ], "details":"python-ujson security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3606" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.9, "vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:python-ujson-4.0.2-3.oe2003sp4.src", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2022-31117" }, { "cve":"CVE-2026-44660", "notes":[ { "text":"UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump() writes to a file-like object and the write operation raises an exception, the serialized JSON string object is not decremented, leaking memory. Each failed write operation leaks the full size of the serialized payload. This vulnerability is fixed in 5.12.1.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:python-ujson-4.0.2-3.oe2003sp4.src", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:python-ujson-4.0.2-3.oe2003sp4.src", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.x86_64" ], "details":"python-ujson security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3606" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.5, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:python-ujson-4.0.2-3.oe2003sp4.src", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.x86_64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-44660" }, { "cve":"CVE-2026-54911", "notes":[ { "text":"UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.13.0, ujson.dumps() (or ujson.dump() or ujson.encode()) have a reject_bytes=False option. When set, they may accept malformed or truncated UTF-8 byte sequences, silently rewriting them into different Unicode characters instead of rejecting them. This leads to input validation bypass and data integrity issues. This vulnerability is fixed in 5.13.0.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:python-ujson-4.0.2-3.oe2003sp4.src", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:python-ujson-4.0.2-3.oe2003sp4.src", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.x86_64" ], "details":"python-ujson security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3606" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":6.5, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:python-ujson-4.0.2-3.oe2003sp4.src", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python-ujson-debuginfo-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-debugsource-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python-ujson-help-4.0.2-3.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-ujson-4.0.2-3.oe2003sp4.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-54911" } ] }