Login Request a demo
CJ
Product
cJSON
by DaveGamble · last CVE Sep 10, 2026
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 5High 10Medium 1Low 0
Severity
All severities16Critical5High10Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add cJSON to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-1000216
8.8
1%
Aug 20
Dave Gamble cJSON version 1.7.2 and earlier contains a CWE-415: Double Free vulnerability in cJSON library that can result in Possible crash or RCE
Affected: before 1.7.3
CVE-2026-16554
7.8
0%
Jul 27
Integer Overflow Leading to Heap Buffer Overflow in cJSON
Affected: 1.7.19
CVE-2026-29036
7.5
0%
Aug 11
cJSON 1.7.19 Wrong-Key Modification via JSON Pointer Escape Decoding
Affected: 1.5.0 through 1.7.19
CVE-2026-67216
7.5
1%
Jul 29
cJSON cJSON_Compare Exponential Complexity Denial of Service
Affected: through 1.7.19
CVE-2026-67215
7.5
1%
Jul 29
cJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion
Affected: through 1.7.19
CVE-2023-50472
7.5
1%
Dec 14
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c
Affected: 1.7.16
CVE-2023-50471
7.5
2%
Dec 14
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c
Affected: 1.7.16
CVE-2019-1010239
7.5
2%
Jul 19
DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions
Affected: 1.7.8
CVE-2018-1000215
7.5
2%
Aug 20
Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service (DoS)
Affected: through 1.7.6
CVE-2026-87933
7.3
1%
Sep 10
DaveGamble cJSON cJSON_Utils.c cJSONUtils_MergePatch use after free
Affected: 1.7.0; 1.7.1; 1.7.2; 1.7.3; 1.7.4; 1.7.5; +14 more
Showing 10