CVE-2026-29975

lwjson 1.8.1 contains an improper input validation vulnerability in the streaming JSON parser lwjsonstream.c. The end-of-string detection logic incorrectly identifies escaped quote characters by only checking the immediately preceding character rather than counting consecutive backslashes, causin...

EUVD-2025-178254

Malicious code in json-stream-aquarius-cygnus npm...

Integer Underflow

Overview Affected versions of this package are vulnerable to Integer Underflow in the GenericReader::ParseNumber function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened, this triggers the integer...

MAL-2022-4074 Malicious code in jsonstsream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad603782f6b86001b6c2dd63872a91ae48f92ea411b205a673b1c04a1c4fe978 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...