Package · PyPI

orjson

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2025-67221 Public exploit

orjson does not limit recursion for deeply nested JSON documents

The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents.

kserve-storage-controller datadog-agent-7.72-core-integrations datadog-agent-7.73-core-integrations py3.10-ambassador Wolfi PyPI

Jan 22, 2026
High 7.5

CVE-2024-27454

orjson does not limit recursion for deeply nested JSON documents

orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents.

kubeflow-pipelines-visualization-server orjson py3-orjson python-orjson Debian Wolfi PyPI

Feb 26, 2024