—
PYSEC-2024-40
Quick fix
PYSEC-2024-40 — orjson: upgrade to the fixed version with the command below.
pip install --upgrade 'orjson>=b0e4d2c06ce06c6e63981bf0276e4b7c74e5845e'Details
orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/orjson
Introduced in:
0Fixed in: b0e4d2c06ce06c6e63981bf0276e4b7c74e5845eFix
pip install --upgrade 'orjson>=b0e4d2c06ce06c6e63981bf0276e4b7c74e5845e'