CVE-2026-29975

CVE-2026-29975 affects lwjson 1.8.1. The vulnerability is in the streaming JSON parser (lwjson_stream.c): end-of-string detection incorrectly checks only the immediately preceding character for escapes, instead of counting consecutive backslashes. This can cause valid JSON strings ending with an ...

EUVD-2025-178254

Malicious code in json-stream-aquarius-cygnus npm...

Integer Underflow

Overview Affected versions of this package are vulnerable to Integer Underflow in the GenericReader::ParseNumber function of include/rapidjson/reader.h when parsing JSON text from a stream. An attacker needs to send the victim a crafted file which needs to be opened, this triggers the integer...

MAL-2022-4074 Malicious code in jsonstsream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad603782f6b86001b6c2dd63872a91ae48f92ea411b205a673b1c04a1c4fe978 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...