Approved changes feed: RSS · Atom

cpe:2.3:a:cjson_project:cjson:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCjson Project (eff62fd8-476f-589f-83a9-bd916292f522)
ProductCjson (b75b0a8a-ddcb-5f52-80e1-d17a0bd14bc7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/viennadd/cjson purl2cpe 2026-06-01 10:15:40.814067
pkg:deb/debian/cjson purl2cpe 2026-06-01 10:15:40.814069
pkg:deb/ubuntu/cjson purl2cpe 2026-06-01 10:15:40.814071
pkg:github/davegamble/cjson purl2cpe 2026-06-01 10:15:40.814072
pkg:rpm/fedora/cjson purl2cpe 2026-06-01 10:15:40.814073
pkg:rpm/opensuse/cjson purl2cpe 2026-06-01 10:15:40.814075
pkg:sourceforge/cjson purl2cpe 2026-06-01 10:15:40.814077

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-31755 vulnerable 2026-06-08 06:35:32.080861 Details available
cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.
Published: 2024-04-26T00:00:00.000Z
Updated: 2024-08-02T01:59:49.417Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-53154 vulnerable 2026-06-08 06:17:56.305293 Details available
LOW (2.9)
parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if cJSON_ParseWithLength is called.
Published: 2025-05-23T00:00:00.000Z
Updated: 2025-11-03T19:28:58.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26819 vulnerable 2026-06-08 05:57:40.384687 Details available
LOW (2.9)
cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.
Published: 2025-04-19T00:00:00.000Z
Updated: 2025-11-03T19:28:10.065Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11835 vulnerable 2026-06-08 05:12:38.173063 Details available
cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments.
Published: 2019-05-09T04:38:38.000Z
Updated: 2024-08-04T23:03:32.775Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11834 vulnerable 2026-06-08 05:12:38.171140 Details available
cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal.
Published: 2019-05-09T04:38:26.000Z
Updated: 2024-08-04T23:03:32.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000217 vulnerable 2026-06-08 05:10:25.655161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000216 vulnerable 2026-06-08 05:10:25.654827 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000215 vulnerable 2026-06-08 05:10:25.653592 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10749 vulnerable 2026-06-08 05:07:25.672471 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.