VDB
Sign up
—

OSV-2021-955

Stack-buffer-overflow in Buffer_AppendIndentUnchecked

Quick fix

OSV-2021-955 — ujson: upgrade to the fixed version with the command below.

pip install --upgrade 'ujson>=f6860f1f3d8d4e92b9be0e5815355a8976c6e75b'

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36009

``` Crash type: Stack-buffer-overflow WRITE 1 Crash state: Buffer_AppendIndentUnchecked encode encode ```

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/ujson
Introduced in: 0c52200eb4e2d97e548a765d5f089858c41967b0Fixed in: f6860f1f3d8d4e92b9be0e5815355a8976c6e75b
Fixpip install --upgrade 'ujson>=f6860f1f3d8d4e92b9be0e5815355a8976c6e75b'

References