First published: Mon Feb 26 2024(Updated: )
orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents.
Affected Software | Affected Version | How to fix |
---|---|---|
pip/orjson | <3.9.15 | 3.9.15 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.