Security Advisories (1)
CVE-2025-40928 (2025-09-08)

JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

Changes for version 4.03 - 2020-10-27

  • when parsing comments in relaxed mode, JSON::XS would detect garbage after the JSON text if the comment is after the end and does not end in a newline (reported by Felipe Gasper).

Documentation

JSON::XS commandline utility

Modules

JSON serialising/deserialising, done correctly and fast
dummy module providing JSON::XS::Boolean

Examples