cJSON
Security Risk Profile
43
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 15, 2023 to present
10
Total CVEs
5
Critical+High
0
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
6.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
43/100
medium
🆕 1Fresh (<7d)📈 5 in Last 30 Days
Severity Distribution
Critical
1High
4Medium
3Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Integer Overflow
1
2
Buffer Overflow
1
3
Out-of-bounds Read
1
Most Affected Products
1. cJSON cJSON9
2. DaveGamble cJSON4
3. Cjson Project Cjson2
4. cJSON JSON Patch1
5. cJSON1
Recent Vulnerabilities
See more →CVE-2026-29036
CVSS 8.7high
cJSON 1.7.19 Wrong-Key Modification via JSON Pointer Escape Decoding
8/11/2026🔧 No Patch
CVE-2026-67217
CVSS 6.9medium
cJSON JSON Patch Non-Atomic Application Destroys Data Before Validation
7/29/2026🔧 No Patch
CVE-2026-67216
CVSS 8.2high
cJSON cJSON_Compare Exponential Complexity Denial of Service
7/29/2026
CVE-2026-67215
CVSS 8.7high
cJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion
7/29/2026🔧 No Patch
CVE-2026-16554
CVSS 5.1medium
Integer Overflow Leading to Heap Buffer Overflow in cJSON
7/27/2026🔧 No Patch
REDHAT-BUG-2392894
CVSS 7.0high
9/3/2025🔧 No Patch
CVE-2025-57052
CVSS 9.8critical
9/3/2025🔧 No Patch
CVE-2023-53154
CVSS 5.5medium
5/23/2025
CVE-2023-26819
CVSS 2.9low
4/19/2025
REDHAT-BUG-2254643
CVSS 1.0low
12/15/2023🔧 No Patch
Monitor cJSON in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.