Security Advisories (1)
CVE-2025-40928 (2025-09-08)

JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

Changes for version 3.03 - 2016-11-16

  • fix a bug introduced by a perl bug workaround that would cause incremental parsing to fail with a sv_chop panic.
  • json_xs: toformat failure error message fixed.
  • json_xs: allow cyclic data structures in CBOR.

Documentation

JSON::XS commandline utility

Modules

JSON serialising/deserialising, done correctly and fast
dummy module providing JSON::XS::Boolean

Examples