Python Json Logger
Approved changes feed: RSS · Atom
cpe:2.3:a:nhairs:python_json_logger:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Nhairs (0301904f-4b70-5f4e-aa16-973e00fb0ad6) |
|---|---|
| Product | Python Json Logger (0f530c76-2e74-5ffe-ac7d-9e4945ffaa07) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/nhairs/python-json-logger |
purl2cpe | 2026-07-28 16:40:58.730188 |
pkg:pypi/python-json-logger |
purl2cpe | 2026-06-01 10:13:18.043473 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-27607 |
vulnerable | 2026-06-08 07:14:55.367319 |
Python JSON Logger has a Potential RCE via missing `msgspec-python313-pre` dependency
HIGH (8.8)
Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party. If the package was claimed, it would allow them RCE on any Python JSON Logger user who installed the development dependencies on Python 3.13 (e.g. pip install python-json-logger[dev]). This issue has been resolved with 3.3.0.
Published: 2025-03-07T16:18:13.789Z
Updated: 2025-03-07T17:50:28.395Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.