550 matches found
Malicious code in turbo-json-parser (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a239b53ed6cbc1e72aac660afa08204b9de36dae39068c30cf175ddd390b4fd1 The package turbo-json-parser was found to contain malicious code. Source: ghsa-malware...
MAL-2026-1213 Malicious code in turbo-json-parser (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a239b53ed6cbc1e72aac660afa08204b9de36dae39068c30cf175ddd390b4fd1 The package turbo-json-parser was found to contain malicious code. Source: ghsa-malware...
Malware in turbo-json-parser
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious Package
Overview turbo-json-parser is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Allocation of Resources Without Limits or Throttling
Overview com.fasterxml.jackson.core:jackson-core is a Core Jackson abstractions, basic JSON streaming API implementation Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in which the non-blocking async JSON parser can be made to bypass the...
fuzzing-portfolio-project
Fuzzing Portfolio Project: Heap Overflow Discovery Author:...
SKRoot security vulnerabilities
SKRoot is a Linux kernel root tool developed by abcz316. SKRoot has a security vulnerability, which stems from a null pointer dereferencing in the JSON parsing component cJSON.Cpp, potentially leading to crashes...
CVE-2022-23460
Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx json parsing may lead to stack exhaustion in an address sanitized ASAN build. This issue may lead to Denial of Service if the program using the jsonxx library crashes. This issue exists on the...
EUVD-2025-205797
Malicious code in @peterwilson12091/internal-json-test-parser npm...
CVE-2025-67731 Servify Express does not enforce rate limiting when parsing JSON
Servify Express is a Node.js package to start an Express server and log the port it's running on. Prior to 1.2, the Express server used express.json without a size limit, which could allow attackers to send extremely large request bodies. This can cause excessive memory usage, degraded performanc...
PT-2025-50903
Servify Express is a Node.js package to start an Express server and log the port it's running on. Prior to 1.2, the Express server used express.json without a size limit, which could allow attackers to send extremely large request bodies. This can cause excessive memory usage, degraded performanc...
ruby:fuzz_json: Heap-buffer-overflow in raise_parse_error
Detailed Report: https://oss-fuzz.com/testcase?key=5248084482523136 Project: ruby Fuzzing Engine: libFuzzer Fuzz Target: fuzzjson Job Type: libfuzzerasanruby Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7d6f36204a8e Crash State: raiseparseerror jsonparseescapedstrin...
📄 Apache bRPC Stack Overflow
A critical stack overflow vulnerability in Apache bRPC's JSON parser allows remote attackers to crash servers via specially crafted deep recursive JSON data. Versions prior to 1.15.0 are affected...
CVE-2025-59789 Apache bRPC: Stack Exhaustion via Unbounded Recursion in JSON Parser
Uncontrolled recursion in the json2pb component in Apache bRPC version 1.15.0 on all platforms allows remote attackers to make the server crash via sending deep recursive json data. Root Cause: The bRPC json2pb component uses rapidjson to parse json data from the network. The rapidjson parser use...
PT-2025-43032
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 141.0.7390.122 Chromium versions prior to 141.0.7390.122 Description An out-of-bounds memory access issue exists in the V8 JavaScript engine due to inappropriate implementation of security checks for standard...
cJSON Parser Heap Buffer Overflow Info Disclosure
The vulnerability of the decodearrayindexfrompointer function in the cJSONUtils.c file of the cJSON parser is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain access to confidential information...
EUVD-2021-10091
Malware in sbrugna...
EUVD-2020-12718
Malware in sbrugna...