#15143 Pants uses a version of ujson that is susseptable to buffer overflow Issue created by asherf https://nvd.nist.gov/vuln/detail/CVE-2021-45958 ujson is dependent upon via the seemingly unmaintained

python-lsp-jsonrpc

(added in #14329) - last commit in January 2022, but almost no commits in 2021. Hopefully this can be closed when a patched version of ujson is published (it seems to be more active). @tdyas @witty-crayon-22786 fyi pantsbuild/pants

#15143 Pants uses a version of ujson that is susseptable to buffer overflow Issue closed as completed by stuhood pantsbuild/pants