Security Advisories (1)
CVE-2025-40928 (2025-09-08)

JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

Changes for version 2.33 - 2012-08-01

  • internal encode/decode XS wrappers did not expect stack moves caused by callbacks (analyzed and testcase by Jesse Luehrs).
  • add bencode as to/from option in bin/json_xs.
  • add -e option to json_xs, and none and string in/out formats.

Documentation

JSON::XS commandline utility

Modules

JSON serialising/deserialising, done correctly and fast
dummy module providing JSON::XS::Boolean

Provides

Examples