OSV-2021-955.yaml

id: OSV-2021-955
summary: Stack-buffer-overflow in Buffer_AppendIndentUnchecked
details: |
  OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36009

  ```
  Crash type: Stack-buffer-overflow WRITE 1
  Crash state:
  Buffer_AppendIndentUnchecked
  encode
  encode
  ```
modified: '2022-05-19T00:45:08.957102Z'
published: '2021-07-11T00:01:05.153778Z'
references:
- type: REPORT
  url: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36009
affected:
- package:
    name: ujson
    ecosystem: PyPI
  ranges:
  - type: GIT
    repo: https://github.com/ultrajson/ultrajson.git
    events:
    - introduced: 0c52200eb4e2d97e548a765d5f089858c41967b0
    - fixed: f6860f1f3d8d4e92b9be0e5815355a8976c6e75b
    - fixed: 5525f8c9ef8bb879dadd0eb942d524827d1b0362
  versions:
  - 2.0.0
  - 2.0.1
  - 2.0.2
  - 2.0.3
  - 3.0.0
  - 3.1.0
  - 3.2.0
  - 4.0.0
  - 4.0.1
  - 4.0.2
  - 4.1.0
  - 4.2.0
  - 4.3.0
  - 5.0.0
  - 5.1.0
  - v1.34
  - v1.35
  ecosystem_specific:
    severity: HIGH