CVE-2024-27454

Name of the Vulnerable Software and Affected Versions orjson versions prior to 3.9.15

Description The issue is related to the orjson.loads function in orjson, which does not limit recursion for deeply nested JSON documents. This can lead to potential exploitation.

Recommendations For versions prior to 3.9.15, update to version 3.9.15 or later to resolve the issue. As a temporary workaround, consider restricting the use of deeply nested JSON documents until a patch is applied.