MediumFix available
collada2gltf, pandas and 1 more products — security advisory
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string decoding can cause the buffer to get freed twice. Due to how UltraJSON uses the internal decoder, this double free is impossible to trigger from Python. This issue has been resolved in version 5.4.0 and all users should upgrade to UltraJSON 5.4.0. There are no known workarounds for this issue.
- Products
- collada2gltf, pandas, ujson
- Affected versions
- 0.12.0-2ubuntu1, 0.13.1-2ubuntu1, 0.13.1-2ubuntu2, 0.15.0-2, 0.15.0-2ubuntu1, 0.15.0-2ubuntu2, 0.17.1-3ubuntu2, 0.19.2-5.1ubuntu4, 0.22.0-2ubuntu1, 0.22.0-3, 0.22.0-4, 0.22.0-4ubuntu1, 0.23.3+dfsg-4ubuntu1, 0.23.3+dfsg-4ubuntu5, 0.23.3+dfsg-4ubuntu6, 0.25.3+dfsg-4, 0.25.3+dfsg-4build1, 0.25.3+dfsg-7, 1.1.5+dfsg-2, 1.1.5+dfsg-2ubuntu1, 1.3.5+dfsg-2, 1.3.5+dfsg-2ubuntu1, 1.3.5+dfsg-3, 1.33-1, 1.33-1build1, 1.35-1build2, 1.35-2, 1.5.3+dfsg-10, 1.5.3+dfsg-6, 1.5.3+dfsg-6ubuntu1, 1.5.3+dfsg-7ubuntu1, 2.1.4+dfsg-4ubuntu2, 2.1.4+dfsg-7, 2.2.3+dfsg-8build1, 2.2.3+dfsg-9, 2.3.3+dfsg-1ubuntu1, 2.3.3+dfsg-3, 2.3.3+dfsg-3ubuntu1, 2.3.3+dfsg-3ubuntu3, 20140924-3, 20140924-4, 20140924-7build1, 20140924-8, 4.0.2-1, 4.0.2-1build1, 4.2.0-1, 5.1.0-1, 5.1.0-1build1
- Fixed versions
- 1.33-1ubuntu0.1~esm2, 1.35-2ubuntu0.1~esm1, 5.1.0-1ubuntu0.1~esm1
- CVEs
- CVE-2022-31117
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 01:01 UTC · Revision 1
Source evidence
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string decoding can cause the buffer to get freed twice. Due to how UltraJSON uses the internal decoder, this double free is impossible to trigger from Python. This issue has been resolved in version 5.4.0 and all users should upgrade to UltraJSON 5.4.0. There are no known workarounds for this issue.
osv:UBUNTU-CVE-2022-31117
pandas
Fixed versions: Not specified
ujson
Fixed versions: 1.33-1ubuntu0.1~esm2
collada2gltf
Fixed versions: Not specified
pandas
Fixed versions: Not specified
collada2gltf
Fixed versions: Not specified
pandas
Fixed versions: Not specified
ujson
Fixed versions: 1.35-2ubuntu0.1~esm1
pandas
Fixed versions: Not specified
collada2gltf
Fixed versions: Not specified
pandas
Fixed versions: Not specified
ujson
Fixed versions: 5.1.0-1ubuntu0.1~esm1
pandas
Fixed versions: Not specified
pandas
Fixed versions: Not specified
pandas
Fixed versions: Not specified
pandas
Fixed versions: Not specified
Complete source record
{
"id": "a80d1eac25906c218ef37df31b530dc1b948c5d2106e7ec4e70e998838273e28",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-31117",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2022-31117",
"summary": "UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string decoding can cause the buffer to get freed twice. Due to how UltraJSON uses the internal decoder, this double free is impossible to trigger from Python. This issue has been resolved in version 5.4.0 and all users should upgrade to UltraJSON 5.4.0. There are no known workarounds for this issue.",
"evidence": "osv:UBUNTU-CVE-2022-31117",
"products": [
{
"name": {
"value": "pandas",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.12.0-2ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "0.13.1-2ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "0.13.1-2ubuntu2",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "ujson",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.33-1ubuntu0.1~esm2",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": [
{
"value": "1.33-1",
"evidence": "/affected/1/versions"
},
{
"value": "1.33-1build1",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "collada2gltf",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "20140924-3",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "pandas",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.15.0-2",
"evidence": "/affected/3/versions"
},
{
"value": "0.15.0-2ubuntu1",
"evidence": "/affected/3/versions"
},
{
"value": "0.15.0-2ubuntu2",
"evidence": "/affected/3/versions"
},
{
"value": "0.17.1-3ubuntu2",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "collada2gltf",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "20140924-4",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "pandas",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.19.2-5.1ubuntu4",
"evidence": "/affected/5/versions"
},
{
"value": "0.22.0-2ubuntu1",
"evidence": "/affected/5/versions"
},
{
"value": "0.22.0-3",
"evidence": "/affected/5/versions"
},
{
"value": "0.22.0-4",
"evidence": "/affected/5/versions"
},
{
"value": "0.22.0-4ubuntu1",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "ujson",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.35-2ubuntu0.1~esm1",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": [
{
"value": "1.35-1build2",
"evidence": "/affected/6/versions"
},
{
"value": "1.35-2",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "pandas",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "0.23.3+dfsg-4ubuntu1",
"evidence": "/affected/7/versions"
},
{
"value": "0.23.3+dfsg-4ubuntu5",
"evidence": "/affected/7/versions"
},
{
"value": "0.23.3+dfsg-4ubuntu6",
"evidence": "/affected/7/versions"
},
{
"value": "0.25.3+dfsg-4",
"evidence": "/affected/7/versions"
},
{
"value": "0.25.3+dfsg-4build1",
"evidence": "/affected/7/versions"
},
{
"value": "0.25.3+dfsg-7",
"evidence": "/affected/7/versions"
}
]
},
{
"name": {
"value": "collada2gltf",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "20140924-7build1",
"evidence": "/affected/8/versions"
},
{
"value": "20140924-8",
"evidence": "/affected/8/versions"
}
]
},
{
"name": {
"value": "pandas",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.1.5+dfsg-2",
"evidence": "/affected/9/versions"
},
{
"value": "1.1.5+dfsg-2ubuntu1",
"evidence": "/affected/9/versions"
},
{
"value": "1.3.5+dfsg-2",
"evidence": "/affected/9/versions"
},
{
"value": "1.3.5+dfsg-2ubuntu1",
"evidence": "/affected/9/versions"
},
{
"value": "1.3.5+dfsg-3",
"evidence": "/affected/9/versions"
}
]
},
{
"name": {
"value": "ujson",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.1.0-1ubuntu0.1~esm1",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": [
{
"value": "4.0.2-1",
"evidence": "/affected/10/versions"
},
{
"value": "4.0.2-1build1",
"evidence": "/affected/10/versions"
},
{
"value": "4.2.0-1",
"evidence": "/affected/10/versions"
},
{
"value": "5.1.0-1",
"evidence": "/affected/10/versions"
},
{
"value": "5.1.0-1build1",
"evidence": "/affected/10/versions"
}
]
},
{
"name": {
"value": "pandas",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.5.3+dfsg-6",
"evidence": "/affected/11/versions"
},
{
"value": "1.5.3+dfsg-6ubuntu1",
"evidence": "/affected/11/versions"
},
{
"value": "1.5.3+dfsg-7ubuntu1",
"evidence": "/affected/11/versions"
},
{
"value": "1.5.3+dfsg-10",
"evidence": "/affected/11/versions"
},
{
"value": "2.1.4+dfsg-4ubuntu2",
"evidence": "/affected/11/versions"
},
{
"value": "2.1.4+dfsg-7",
"evidence": "/affected/11/versions"
}
]
},
{
"name": {
"value": "pandas",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.2.3+dfsg-8build1",
"evidence": "/affected/12/versions"
},
{
"value": "2.2.3+dfsg-9",
"evidence": "/affected/12/versions"
}
]
},
{
"name": {
"value": "pandas",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.3.3+dfsg-3ubuntu1",
"evidence": "/affected/13/versions"
},
{
"value": "2.3.3+dfsg-3ubuntu3",
"evidence": "/affected/13/versions"
}
]
},
{
"name": {
"value": "pandas",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.2.3+dfsg-9",
"evidence": "/affected/14/versions"
},
{
"value": "2.3.3+dfsg-1ubuntu1",
"evidence": "/affected/14/versions"
},
{
"value": "2.3.3+dfsg-3",
"evidence": "/affected/14/versions"
},
{
"value": "2.3.3+dfsg-3ubuntu1",
"evidence": "/affected/14/versions"
}
]
}
],
"severity": "medium",
"structured": {
"id": "UBUNTU-CVE-2022-31117",
"aliases": [
"UBUNTU-CVE-2022-31117"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "pandas",
"purl": "pkg:deb/ubuntu/pandas?arch=source&distro=trusty",
"ecosystem": "Ubuntu:14.04:LTS"
},
"versions": [
"0.12.0-2ubuntu1",
"0.13.1-2ubuntu1",
"0.13.1-2ubuntu2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-31117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python-pandas",
"binary_version": "0.13.1-2ubuntu2"
},
{
"binary_name": "python-pandas-lib",
"binary_version": "0.13.1-2ubuntu2"
},
{
"binary_name": "python3-pandas",
"binary_version": "0.13.1-2ubuntu2"
},
{
"binary_name": "python3-pandas-lib",
"binary_version": "0.13.1-2ubuntu2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.33-1ubuntu0.1~esm2"
}
]
}
],
"package": {
"name": "ujson",
"purl": "pkg:deb/ubuntu/ujson?arch=source&distro=esm-apps%2Fxenial",
"ecosystem": "Ubuntu:Pro:16.04:LTS"
},
"versions": [
"1.33-1",
"1.33-1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-31117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python-ujson",
"binary_version": "1.33-1ubuntu0.1~esm2"
},
{
"binary_name": "python3-ujson",
"binary_version": "1.33-1ubuntu0.1~esm2"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "collada2gltf",
"purl": "pkg:deb/ubuntu/collada2gltf?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"20140924-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-31117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libcollada2gltfconvert-dev",
"binary_version": "20140924-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "pandas",
"purl": "pkg:deb/ubuntu/pandas?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"0.15.0-2",
"0.15.0-2ubuntu1",
"0.15.0-2ubuntu2",
"0.17.1-3ubuntu2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-31117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python-pandas",
"binary_version": "0.17.1-3ubuntu2"
},
{
"binary_name": "python-pandas-lib",
"binary_version": "0.17.1-3ubuntu2"
},
{
"binary_name": "python3-pandas",
"binary_version": "0.17.1-3ubuntu2"
},
{
"binary_name": "python3-pandas-lib",
"binary_version": "0.17.1-3ubuntu2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "collada2gltf",
"purl": "pkg:deb/ubuntu/collada2gltf?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"20140924-4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-31117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libcollada2gltfconvert-dev",
"binary_version": "20140924-4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "pandas",
"purl": "pkg:deb/ubuntu/pandas?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"0.19.2-5.1ubuntu4",
"0.22.0-2ubuntu1",
"0.22.0-3",
"0.22.0-4",
"0.22.0-4ubuntu1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-31117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python-pandas",
"binary_version": "0.22.0-4ubuntu1"
},
{
"binary_name": "python-pandas-lib",
"binary_version": "0.22.0-4ubuntu1"
},
{
"binary_name": "python3-pandas",
"binary_version": "0.22.0-4ubuntu1"
},
{
"binary_name": "python3-pandas-lib",
"binary_version": "0.22.0-4ubuntu1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.35-2ubuntu0.1~esm1"
}
]
}
],
"package": {
"name": "ujson",
"purl": "pkg:deb/ubuntu/ujson?arch=source&distro=esm-apps%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"1.35-1build2",
"1.35-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-31117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python-ujson",
"binary_version": "1.35-2ubuntu0.1~esm1"
},
{
"binary_name": "python3-ujson",
"binary_version": "1.35-2ubuntu0.1~esm1"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "pandas",
"purl": "pkg:deb/ubuntu/pandas?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"0.23.3+dfsg-4ubuntu1",
"0.23.3+dfsg-4ubuntu5",
"0.23.3+dfsg-4ubuntu6",
"0.25.3+dfsg-4",
"0.25.3+dfsg-4build1",
"0.25.3+dfsg-7"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-31117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python3-pandas",
"binary_version": "0.25.3+dfsg-7"
},
{
"binary_name": "python3-pandas-lib",
"binary_version": "0.25.3+dfsg-7"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "collada2gltf",
"purl": "pkg:deb/ubuntu/collada2gltf?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"20140924-7build1",
"20140924-8"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-31117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libcollada2gltfconvert-dev",
"binary_version": "20140924-8"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "pandas",
"purl": "pkg:deb/ubuntu/pandas?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"1.1.5+dfsg-2",
"1.1.5+dfsg-2ubuntu1",
"1.3.5+dfsg-2",
"1.3.5+dfsg-2ubuntu1",
"1.3.5+dfsg-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-31117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python3-pandas",
"binary_version": "1.3.5+dfsg-3"
},
{
"binary_name": "python3-pandas-lib",
"binary_version": "1.3.5+dfsg-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.1.0-1ubuntu0.1~esm1"
}
]
}
],
"package": {
"name": "ujson",
"purl": "pkg:deb/ubuntu/ujson?arch=source&distro=esm-apps%2Fjammy",
"ecosystem": "Ubuntu:Pro:22.04:LTS"
},
"versions": [
"4.0.2-1",
"4.0.2-1build1",
"4.2.0-1",
"5.1.0-1",
"5.1.0-1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-31117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python3-ujson",
"binary_version": "5.1.0-1ubuntu0.1~esm1"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "pandas",
"purl": "pkg:deb/ubuntu/pandas?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"1.5.3+dfsg-6",
"1.5.3+dfsg-6ubuntu1",
"1.5.3+dfsg-7ubuntu1",
"1.5.3+dfsg-10",
"2.1.4+dfsg-4ubuntu2",
"2.1.4+dfsg-7"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-31117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python3-pandas",
"binary_version": "2.1.4+dfsg-7"
},
{
"binary_name": "python3-pandas-lib",
"binary_version": "2.1.4+dfsg-7"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "pandas",
"purl": "pkg:deb/ubuntu/pandas?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"2.2.3+dfsg-8build1",
"2.2.3+dfsg-9"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-31117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python3-pandas",
"binary_version": "2.2.3+dfsg-9"
},
{
"binary_name": "python3-pandas-lib",
"binary_version": "2.2.3+dfsg-9"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "pandas",
"purl": "pkg:deb/ubuntu/pandas?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"2.3.3+dfsg-3ubuntu1",
"2.3.3+dfsg-3ubuntu3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-31117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python3-pandas",
"binary_version": "2.3.3+dfsg-3ubuntu3"
},
{
"binary_name": "python3-pandas-lib",
"binary_version": "2.3.3+dfsg-3ubuntu3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "pandas",
"purl": "pkg:deb/ubuntu/pandas?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"2.2.3+dfsg-9",
"2.3.3+dfsg-1ubuntu1",
"2.3.3+dfsg-3",
"2.3.3+dfsg-3ubuntu1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-31117.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "python3-pandas",
"binary_version": "2.3.3+dfsg-3ubuntu1"
},
{
"binary_name": "python3-pandas-lib",
"binary_version": "2.3.3+dfsg-3ubuntu1"
}
]
}
}
],
"modified": "2026-10-17T12:56:22.014804074Z",
"provider": "osv",
"upstream": [
"CVE-2022-31117"
],
"references": [
"https://ubuntu.com/security/CVE-2022-31117",
"https://github.com/ultrajson/ultrajson/security/advisories/GHSA-fm67-cv37-96ff",
"https://github.com/ultrajson/ultrajson/commit/9c20de0f77b391093967e25d01fb48671104b15b",
"https://ubuntu.com/security/notices/USN-6629-1",
"https://ubuntu.com/security/notices/USN-6629-3",
"https://www.cve.org/CVERecord?id=CVE-2022-31117"
]
},
"related_cves": [
{
"value": "CVE-2022-31117",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 355447,
"published_at": "2022-07-05T18:15:00+00:00"
}