https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:01:57 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-12591 bdu:2025-12591 https://cve.radiocsirt.org/vuln/bdu:2025-12591 https://cve.radiocsirt.org/vuln/bell-cve-2025-57052 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2025-57052 https://cve.radiocsirt.org/vuln/euvd-2026-257575 EUVD-2026-257575 https://cve.radiocsirt.org/vuln/euvd-2026-257575 https://cve.radiocsirt.org/vuln/fkie_cve-2025-57052 <p>cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.</p> <p>cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-57052 https://cve.radiocsirt.org/vuln/ghsa-98j5-4649-rfv2 <p>cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.</p> <p>cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.</p> https://cve.radiocsirt.org/vuln/ghsa-98j5-4649-rfv2 https://cve.radiocsirt.org/vuln/msrc_cve-2025-57052 msrc_CVE-2025-57052 https://cve.radiocsirt.org/vuln/msrc_cve-2025-57052 https://cve.radiocsirt.org/vuln/oesa-2025-2374 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: cjson</p> <p>cJSON aims to be the dumbest possible parser that you can get your job done with. It&amp;amp;apos;s a single file of C, and a single header file. %package devel Summary: Development files for cJSON Requires: = - %description devel The cjson-devel package contains libraries and header files for developing applications that use cJSON. %prep %autosetup -n cJSON- -p1 Security Fix(es):</p> <p>cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.(CVE-2025-57052)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: cjson</p> <p>cJSON aims to be the dumbest possible parser that you can get your job done with. It&amp;amp;apos;s a single file of C, and a single header file. %package devel Summary: Development files for cJSON Requires: = - %description devel The cjson-devel package contains libraries and header files for developing applications that use cJSON. %prep %autosetup -n cJSON- -p1 Security Fix(es):</p> <p>cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.(CVE-2025-57052)</p> https://cve.radiocsirt.org/vuln/oesa-2025-2374 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15583-1 <p>cJSON-devel-1.7.19-1.1 on GA media</p> <p>cJSON-devel-1.7.19-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15583-1 https://cve.radiocsirt.org/vuln/rhsa-2025:17606 <p>rexml: REXML: Denial of Service via inefficient regex parsing cJSON: out-of-bounds access in decode_array_index_from_pointer() in cJSON_Utils.c via crafted JSON pointer strings django: Django SQL injection in FilteredRelation column aliases</p> <p>rexml: REXML: Denial of Service via inefficient regex parsing cJSON: out-of-bounds access in decode_array_index_from_pointer() in cJSON_Utils.c via crafted JSON pointer strings django: Django SQL injection in FilteredRelation column aliases</p> https://cve.radiocsirt.org/vuln/rhsa-2025:17606 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-57052 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: cjson, Ubuntu:22.04:LTS: cjson, Ubuntu:Pro:24.04:LTS: cjson, Ubuntu:25.10: cjson</p> <p>cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: cjson, Ubuntu:22.04:LTS: cjson, Ubuntu:Pro:24.04:LTS: cjson, Ubuntu:25.10: cjson</p> <p>cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed JSON pointer strings containing alphanumeric characters.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-57052 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2244 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Satellite und Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen und um beliebige SQL-Befehle einzuschleusen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Satellite und Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen und um beliebige SQL-Befehle einzuschleusen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2244