Security Advisories (1)
CVE-2025-40928 (2025-09-08)

JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

Changes for version 3.0 - 2013-10-29

  • implemented an object tagging extension (using the Types::Serialiser serialisation protocol).
  • reworked the documentation regarding object serialisation, add a new OBJECT SERIALISATION section that explains the whole process.
  • new setting: allow_tags.
  • switch to Types::Serialiser booleans.
  • remove to_json/from_json.
  • other minor improvements to the documentation.

Documentation

JSON::XS commandline utility

Modules

JSON serialising/deserialising, done correctly and fast
dummy module providing JSON::XS::Boolean

Examples