Security Advisories (1)
CVE-2025-40928 (2025-09-08)

JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

Changes for version 2.231 - 2008-11-20

  • work around 5.10.0 magic bugs where manipulating magic values (such as $1) would permanently damage them as perl would ignore the magicalness, by making a full copy of the string, reported by Dmitry Karasik.
  • work around spurious wanrings under older perl 5.8's.

Documentation

JSON::XS commandline utility

Modules

JSON serialising/deserialising, done correctly and fast
dummy module providing JSON::XS::Boolean

Provides

Examples