orjson@3.5.2 vulnerabilities

Fast, correct Python JSON library supporting dataclasses, datetimes, and numpy

Direct Vulnerabilities

Known vulnerabilities in the orjson package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Relative Path Traversal

Affected versions of this package are vulnerable to Relative Path Traversal due to the lack of recursion depth limitation. An attacker can cause a denial of service by submitting a specially crafted, deeply nested JSON document.

How to fix Relative Path Traversal?

Upgrade orjson to version 3.9.15 or higher.

[,3.9.15)