CVE-2024-27454

Published February 26th, 2024

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

1

PROJECT

Description

orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents.

Fast, correct Python JSON library supporting dataclasses, datetimes, and numpy

GitHub

8.1K