Is ujson safe to use?

ujson has 2 known vulnerabilities on the latest version (5.12.0). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of ujson?

The latest version of ujson is 5.12.0, released 2026-03-12.

Does ujson have known vulnerabilities?

Yes. ujson has 2 known vulnerabilities. See depscope.dev/pkg/conda/ujson for details.

No, ujson is actively maintained. Latest release: 5.12.0 (2026-03-12).

What are alternatives to ujson?

DepScope has no curated alternatives for ujson at this time.

What license does ujson use?

ujson is licensed under BSD-3-Clause.

ujson

condav5.12.0

Ultra fast JSON decoder and encoder written in C with Python bindings

License BSD-3-Clausepermissive24 versions1 maintainers0 deps25,515 weekly dl

ultrajson/ultrajson

/ 100

Health

safe to use

[email protected] is safe to use (health: 69/100)

Update to >= 5525f8c9ef8bb879dadd0eb942d524827d1b0362 to fix known vulnerabilities

Health breakdown0 – 100

20/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

2 low

Advisories (2)

Severity	ID	Summary	Fixed in
unknown	OSV-2021-1809	Heap-buffer-overflow in ujson.cpython-38-x86_64-linux-gnu.so	550ba4d77294e61597a5259d00769c61281e0042
unknown	OSV-2021-955	Stack-buffer-overflow in Buffer_AppendIndentUnchecked	5525f8c9ef8bb879dadd0eb942d524827d1b0362

Maintainer trust

Active maintainers (3m)

5

Contributors (12m)

9

Primary author dominance

59%

GitHub stars

4,482

recent ownership change suspected

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/conda/ujson

First published · 2020-06-03 19:58:10.317000+00:00

Last updated · 2026-03-12 03:48:32.815000+00:00