{"items":[{"id":"CVE-2023-53154","published":"2025-05-23T00:00:00.000Z","updated":"2025-11-03T19:28:58.976Z","title":"parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {\"1\":1, with no trailing newline if cJSON_ParseWithLength is called.","severity":"LOW","score":2.9,"vendor":"cJSON project","product":"cJSON","kev":false,"epss":0.00278,"kevAdded":null,"exploit":true},{"id":"CVE-2023-26819","published":"2025-04-19T00:00:00.000Z","updated":"2025-11-03T19:28:10.065Z","title":"cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {\"a\": true, \"b\": [ null,9999999999999999999999999999999999999999999999912345678…","severity":"LOW","score":2.9,"vendor":"cJSON Project","product":"cJSON","kev":false,"epss":0.00234,"kevAdded":null,"exploit":true}]}