@streamparser/json

@streamparser/json

Releases21
Frequency2 months 2 weeks
Last Release
Streaming JSON parser in Javascript for Node.js, Deno and the browser

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
= 1.0.0, = 1.0.15.9 MEDIUM

Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx json parsing may lead to stack exhaustion in an address sanitized (ASAN) build. This issue may lead to Denial of Service if the program using the jsonxx library crashes. This issue exists on the current commit of the jsonxx project and the project itself has been archived. Updates are not expected. Users are advised to find a replacement.

= 1.0.0, = 1.0.18.1 HIGH

Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx use of the Value class may lead to memory corruption via a double free or via a use after free. The value class has a default assignment operator which may be used with pointer types which may point to alterable data where the pointer itself is not updated. This issue exists on the current commit of the jsonxx project. The project itself has been archived and updates are not expected. Users are advised to find a replacement.