Security Advisories (1)
CVE-2025-40928 (2025-09-08)

JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

Changes for version 1.0 - 2007-03-29

  • the long awaited (by me) 1.0 version.
  • add \0 (JSON::XS::false) and \1 (JSON::XS::true) mappings to JSON true and false.
  • add some more notes to shrink, as suggested by Alex Efros.
  • improve testsuite.
  • half the default nesting depth limit, to hopefully make it work on Freebsd (unfortunately, the cpan tester did not send me his report, so I cannot ask about the stack limit on fbsd).

Modules

JSON serialising/deserialising, done correctly and fast

Examples