It was reported [1] that Python built-in _json module have a flaw (insufficient bounds checking), which allows a local user to read current process' arbitrary memory. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-4616