Changes for version 4.41 - 2026-05-27

  • Fix BOM-shift PV-corruption SIGABRT (CVE-2026-9516) (patch by Paul Johnson)
  • Fix dupkeys_as_arrayref type confusion (CVE-2026-9334) (patch by Paul Johnson)
  • Fix incr_parse single-quote string delimiter (GH #245, reported by Paul Johnson)
  • Fix a one-byte out-of-bounds heap read reachable via allow_barekey on truncated input (GH #244, reported by Paul Johnson)

Documentation

Cpanel::JSON::XS commandline utility

Modules

cPanel fork of JSON::XS, fast and correct serializing
true and false values
Type support for JSON encode

Examples