Security Advisories (1)
CVE-2025-40928 (2025-09-08)

JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

Changes for version 2.1 - 2008-03-19

  • update documentation here and there: add a large section about utf8/latin1/ascii flags, add a security consideration and extend and clarify the JSON and YAML section.
  • medium speed enhancements when encoding/decoding non-ascii chars.
  • minor speedup in number encoding case.
  • extend and clarify the section on incompatibilities between YAML and JSON.
  • switch to static inline from just inline when using gcc.
  • add =encoding utf-8 to the manpage, now that perl 5.10 supports it.
  • fix some issues with UV to JSON conversion of unknown impact.
  • published the yahoo locals search result used in benchmarks as the original url changes so comparison is impossible.

Modules

JSON serialising/deserialising, done correctly and fast
dummy module providing JSON::XS::Boolean

Provides

Examples