PatchTheCVE: janssonhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-36325: An issue was discovered in Jansson through 2.13.1https://patchthecve.com/cve/CVE-2020-36325.htmlhttps://patchthecve.com/cve/CVE-2020-36325.htmlWed, 17 Jun 2026 03:15:18 +0000HIGH 7.5: An issue was discovered in Jansson through 2.13.1. Due to a parsing error in json_loads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specificationCVE-2016-4425: Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stackhttps://patchthecve.com/cve/CVE-2016-4425.htmlhttps://patchthecve.com/cve/CVE-2016-4425.htmlWed, 17 Jun 2026 00:47:31 +0000MEDIUM 6.5: Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via crafted JSON data.CVE-2013-6401: Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, whichhttps://patchthecve.com/cve/CVE-2013-6401.htmlhttps://patchthecve.com/cve/CVE-2013-6401.htmlWed, 17 Jun 2026 00:00:25 +0000MEDIUM 5.0: Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted JSON document.