diff --git a/pkgs/development/python-modules/ujson/default.nix b/pkgs/development/python-modules/ujson/default.nix index 987347c86951..4becc946035f 100644 --- a/pkgs/development/python-modules/ujson/default.nix +++ b/pkgs/development/python-modules/ujson/default.nix @@ -5,6 +5,7 @@ , pytestCheckHook , pythonOlder , setuptools-scm +, fetchpatch }: buildPythonPackage rec { @@ -17,6 +18,14 @@ buildPythonPackage rec { sha256 = "a88944d2f99db71a3ca0c63d81f37e55b660edde0b07216fb65a3e46403ef004"; }; + patches = [ + (fetchpatch { + name = "CVE-2022-31117.patch"; + url = "https://github.com/ultrajson/ultrajson/commit/b21da40ead640b6153783dad506e68b4024056ef.patch"; + sha256 = "sha256-H8cxJ54ESZqtvJzC1W7Dl7WmdApxhLeSllsQW3uG1yc="; + }) + ]; + nativeBuildInputs = [ setuptools-scm ];