CVE-2025-67221

Published January 22nd, 2026

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

2

PROJECTS

Description

The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents.

Fast, correct Python JSON library supporting dataclasses, datetimes, and numpy

GitHub

8.1K

kpatsakis/CVE-2025-67221

A vulnerability in orjson

GitHub

1