Vulnerability Database · Debian · ujson · Version
ujson 5.5.0-2
5.5.0-2 is affected by 7 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 4 Medium 3 Low 0 Unrated 0
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
ujson 5.5.0-2 vulnerabilities
7 vulnerabilities cover ujson 5.5.0-2. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| Memory Leak Vulnerability in UltraJSON (ujson) Prior to Version 5.12.1 | 7.5 high | No fix published | 27 May 2026 |
| Memory Leak Vulnerability in UltraJSON (ujson) Affects Multiple Debian Versions | 7.5 high | No fix published | 20 Mar 2026 |
| Buffer Overflow and Infinite Loop Vulnerability in ujson Package | 7.5 high | No fix published | 20 Mar 2026 |
| Improper JSON Decoding in UltraJSON (ujson) Leading to Potential Data Corruption | 7.5 high | No fix published | 05 Jul 2022 |
| Input Validation Bypass in UltraJSON (ujson) - CVE-2026-54911 | 6.5 medium | No fix published | 22 Jun 2026 |
| Double Free Vulnerability in UltraJSON (ujson) Prior to Version 5.4.0 | 5.9 medium | No fix published | 05 Jul 2022 |
| Buffer Overflow Vulnerability in UltraJSON (ujson) Package | 5.5 medium | No fix published | 01 Jan 2022 |
Looking for another version, or everything Vulert holds for ujson?
Questions
About ujson 5.5.0-2
Is ujson 5.5.0-2 vulnerable?
Yes. 7 vulnerabilities in the Vulert database cover ujson 5.5.0-2: 0 critical, 4 high, 3 medium and 0 low. Each entry above names the fixed version to move to.
How do I monitor ujson for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the ujson version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.