ThreatCluster

Multiple CVEs Identified in cJSON Library Affecting Versions Prior to 1.7.11

First seen 18 Feb 2026, 14:22 UTC Api.Msrc.Microsoft 39

Article Content

Browse articles
ThreatCluster

Two vulnerabilities have been reported in the cJSON library, affecting versions prior to 1.7.11. CVE-2019-11835, published on May 9, 2019, and CVE-2018-1000215, published on August 20, 2018, expose users to potential security risks. Users of cJSON versions 1.7.6 and earlier should update to mitigate these vulnerabilities.

Timeline

2018-08-20
CVE-2018-1000215 published
2019-05-09
CVE-2019-11835 published
2026-02-18
Information published about both CVEs