Security Advisories (1)
CVE-2025-40928 (2025-09-08)

JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

Changes for version 1.51

  • encode empty arrays/hashes in a compact way when pretty is enabled.
  • apperently JSON::XS was used to find some bugs in the JSON_checker testsuite, so add (the corrected) JSON_checker tests to the testsuite.
  • quite a bit of doc updates/extension.
  • require 5.8.2, as this seems to be the first unicode-stable version.

Modules

JSON serialising/deserialising, done correctly and fast
dummy module providing JSON::XS::Boolean

Provides

Examples