PatchTheCVEcjson project vulnerabilities
Recent CVEs affecting cjson project products. 2 tracked.
cjson project has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-05-23. Highest priority: CVE-2023-53154 (score 20/100).
- CVE-2023-53154 LOW 2.9 UPGRADE parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if
- CVE-2023-26819 LOW 2.9 DOWNGRADE cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,99999
FAQ
How do I fix cjson project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cjson project being exploited right now?
None of the tracked cjson project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cjson project CVE should I patch first?
CVE-2023-53154 currently ranks highest (20/100): parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no trailing newline if .