~ / search / GHSA-hx9q-6w63-j58v

GHSA-hx9q-6w63-j58v

orjson does not limit recursion for deeply nested JSON documents

Source: GitHub Advisory Database (reviewed) High CVE-2025-67221

Packages

EcosystemPackageAffectedFixed in
PyPI orjson < 3.11.6 3.11.6

Details

As written in the advisory (Markdown source, shown as plain text).

The orjson.dumps function in orjson before 3.11.6 does not limit recursion for deeply nested JSON documents.

References

External links from the advisory. They lead to third-party sites.