How many ultrajson project ultrajson CVEs are in CISA KEV?

None of ultrajson project ultrajson's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of ultrajson project ultrajson are affected?

11 distinct ultrajson project ultrajson versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in ultrajson project ultrajson CVEs?

ultrajson project ultrajson's CVEs most often map to these CWE weakness types: CWE-401 (Missing Release of Memory after Effective Lifetime), CWE-190 (Integer Overflow or Wraparound), CWE-20 (Improper Input Validation), CWE-415 (Double Free).

What is the average severity of ultrajson project ultrajson CVEs?

The average CVSS base score across ultrajson project ultrajson's scored CVEs is 7.2.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

ultrajson project

7 CVEs

ultrajson project ultrajson Vulnerabilities

Name: ultrajson project ultrajson vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for ultrajson by ultrajson project.

7

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

3

Public exploits

PoC or exploit code

7.2

Avg CVSS

2021–2026

Last updated June 22, 2026

Overview

ultrajson project ultrajson has 7 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting ultrajson project ultrajson, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of ultrajson project ultrajson's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High4

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of ultrajson project ultrajson's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3

3 of ultrajson project ultrajson's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every ultrajson project ultrajson version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 5.4.02 CVEs
< 5.12.11 CVE
< 5.13.01 CVE
< 5.2.01 CVE
5.1.0 <= v < 5.12.01 CVE
5.4.0 <= v < 5.12.01 CVE

Fixed in

5.12.02 CVEs
5.4.02 CVEs
5.12.11 CVE
5.13.01 CVE
5.2.01 CVE

Find a version

7 CVEs

Sort

UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()
CVE-2026-54911
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.3% (19th pct)2026-06-22
UltraJSON: Memory Leak in ujson.dump() on Write Failure
CVE-2026-44660
Public exploit
Patch
CWE-401
High · CVSS 8.7
EPSS 0.4% (35th pct)2026-05-27
UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop
CVE-2026-32875
Public exploit
Patch
CWE-190
High · CVSS 7.5
EPSS 0.5% (38th pct)2026-03-20
UltraJSON has a Memory Leak parsing large integers allows DoS
CVE-2026-32874
Patch
CWE-401
High · CVSS 7.5
EPSS 0.5% (39th pct)2026-03-20
High vulnerability · 2022-07-05
CVE-2022-31116
Public exploit
Patch
CWE-670
High · CVSS 7.5
EPSS 2.3% (82th pct)2022-07-05
Medium vulnerability · 2022-07-05
CVE-2022-31117
Patch
CWE-415
Medium · CVSS 5.9
EPSS 1.7% (75th pct)2022-07-05
Medium vulnerability · 2021-12-31
CVE-2021-45958
Patch
Medium · CVSS 6.8
EPSS 1.6% (73th pct)2021-12-31

Common weakness types

The CWE weakness categories most often found in ultrajson project ultrajson CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many ultrajson project ultrajson CVEs were published each year.

2021

1

2022

2

2026

4

Other ultrajson project products

Browse vulnerabilities for other products by ultrajson project.

All ultrajson project vulnerabilities

Frequently asked questions

Common questions about ultrajson project ultrajson vulnerabilities.

How many CVEs does ultrajson project ultrajson have?: ultrajson project ultrajson has 7 published CVE records since 2021.
How many ultrajson project ultrajson CVEs are in CISA KEV?: None of ultrajson project ultrajson's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for ultrajson project ultrajson vulnerabilities?: Yes — 3 of ultrajson project ultrajson's CVEs have a known public exploit.
Which versions of ultrajson project ultrajson are affected?: 11 distinct ultrajson project ultrajson versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in ultrajson project ultrajson CVEs?: ultrajson project ultrajson's CVEs most often map to these CWE weakness types: CWE-401 (Missing Release of Memory after Effective Lifetime), CWE-190 (Integer Overflow or Wraparound), CWE-20 (Improper Input Validation), CWE-415 (Double Free).
What is the average severity of ultrajson project ultrajson CVEs?: The average CVSS base score across ultrajson project ultrajson's scored CVEs is 7.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track ultrajson project ultrajson vulnerabilities

Monitor new ultrajson project ultrajson vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing