CVE-2025-67221
Published Jan 22, 2026The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents.
Vendor/product archive
2 CVEs tagged to ijl / orjson — 0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.
The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents.
orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents.