Search for packages
| purl | pkg:pypi/orjson@3.11.6 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-5728-qpbw-7qbq | The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents. |
CVE-2025-67221
GHSA-hx9q-6w63-j58v PYSEC-2026-107 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-05-31T01:06:56.745192+00:00 | GHSA Importer | Fixing | VCID-5728-qpbw-7qbq | https://github.com/advisories/GHSA-hx9q-6w63-j58v | 38.6.0 |
| 2026-05-30T21:06:05.705356+00:00 | GitLab Importer | Fixing | VCID-5728-qpbw-7qbq | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/orjson/CVE-2025-67221.yml | 38.6.0 |