Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Yajl Project

First CVE: Jun 6, 2023Active for: 3 yearsTotal CVEs: 1

Yajl Project maintains a lightweight JSON parsing library embedded across a range of applications and systems where its compact footprint is valued. The vendor's vulnerability exposure centers on memory-management issues, particularly memory-leak conditions arising from incomplete resource cleanup in the parsing workflow. Current severity, exploitation status, and exposure counts are shown alongside this summary.

FAUCET AI Generated
1
Total CVEs
Bottom 1%
1.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 12% of tracked vendors
6.5
Avg CVSS Score
Higher Avg CVSS Score than 40% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Yajl Project over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jun 6, 2023
3 years ago
Most Recent CVE
Jun 6, 2023
1,144 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (1 CVEs).

1 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2023-33460MEDIUM
There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash.
Jun 6, 20236.520NONO
View all 1 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products1 CVEs
100%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
Medium
Attack Vector
Local0 (0.0%)
Network1 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None0 (0.0%)
Unknown0 (0.0%)
Required1 (100.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (100.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (1 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Yajl Project.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Yajl Project — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Yajl Project's Products

View all 1 CNAs →

Top CWEs