Approved changes feed: RSS · Atom
cpe:2.3:a:jansson_project:jansson:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Jansson Project (fa7e416b-301e-5d04-964c-1250f3e6ac12) |
|---|---|
| Product | Jansson (48d031c5-67df-5280-b8c2-c8668a583ec6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/boardwaalk/jansson |
purl2cpe | 2026-06-01 10:18:20.927707 |
pkg:deb/debian/jansson |
purl2cpe | 2026-06-01 10:18:20.927710 |
pkg:deb/ubuntu/jansson |
purl2cpe | 2026-06-01 10:18:20.927713 |
pkg:github/akheron/jansson |
purl2cpe | 2026-06-01 10:18:20.927715 |
pkg:gitlab/redhat/jansson |
purl2cpe | 2026-06-01 10:18:20.927718 |
pkg:rpm/centos/jansson |
purl2cpe | 2026-06-01 10:18:20.927721 |
pkg:rpm/fedora/jansson |
purl2cpe | 2026-06-01 10:18:20.927724 |
pkg:rpm/opensuse/jansson |
purl2cpe | 2026-06-01 10:18:20.927727 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-36325 |
vulnerable | 2026-06-08 05:25:02.963709 |
Details available
An issue was discovered in Jansson through 2.13.1. Due to a parsing error in json_loads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification
Published: 2021-04-26T17:05:28.000Z
Updated: 2024-08-04T17:23:10.468Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4425 |
vulnerable | 2026-06-08 05:07:47.393235 |
Details available
Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via crafted JSON data.
Published: 2016-05-17T14:00:00.000Z
Updated: 2025-12-04T17:09:13.364Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-6401 |
vulnerable | 2026-06-08 05:04:56.477168 |
Details available
Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted JSON document.
Published: 2014-03-20T18:00:00.000Z
Updated: 2024-08-06T17:39:01.595Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.