Critical DSA-6001-1 1 CVE

cjson - security update

Published Sep 14, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 12	cjson	1.7.15-1+deb12u4
Debian · 13	cjson	1.7.18-3.1+deb13u1

Vulnerabilities 1

Critical 9.8

CVE-2025-57052 Public exploit

cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.…

cjson cjson cjson Debian Ubuntu Alpine

Sep 3, 2025