Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/simplejson@1.4
purl pkg:pypi/simplejson@1.4
Next non-vulnerable version 2.6.1
Latest non-vulnerable version 2.6.1
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-f5vu-k9rc-27fz
Aliases:
CVE-2014-4616
GHSA-9772-cwx9-r4cj
Improper Validation of Array Index Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.
2.6.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T21:51:16.281533+00:00 GitLab Importer Affected by VCID-f5vu-k9rc-27fz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/simplejson/CVE-2014-4616.yml 38.4.0
2026-04-11T23:07:20.155846+00:00 GitLab Importer Affected by VCID-f5vu-k9rc-27fz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/simplejson/CVE-2014-4616.yml 38.3.0
2026-04-02T23:15:33.227560+00:00 GitLab Importer Affected by VCID-f5vu-k9rc-27fz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/simplejson/CVE-2014-4616.yml 38.1.0
2026-04-01T17:35:35.032258+00:00 GitLab Importer Affected by VCID-f5vu-k9rc-27fz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/simplejson/CVE-2014-4616.yml 38.0.0