Search results

cJSON_Utils may dereference NULL valuestring after cJSON_IsString() checks

Status: Open.

#1011 In DaveGamble/cJSON;

· Yanhaoxi opened on Apr 23, 2026

cJSONUtils_ApplyPatches* dereferences NULL object on root-level add/replace

Status: Open.

#1010 In DaveGamble/cJSON;

· Yanhaoxi opened on Apr 23, 2026

Empty array reference token is incorrectly accepted as index 0 in JSON Pointer evaluation

Status: Open.

#1009 In DaveGamble/cJSON;

· Yanhaoxi opened on Apr 22, 2026

Code Review found 2 critical bugs

Status: Open.

#1007 In DaveGamble/cJSON;

· cpsource opened on Apr 17, 2026

Inquiry regarding security reporting procedures

Status: Open.

#1005 In DaveGamble/cJSON;

· T0pk1Ng opened on Apr 7, 2026

why not support json5？

Status: Open.

#1004 In DaveGamble/cJSON;

· liyqxtu opened on Apr 5, 2026

Undefined-Behavior (Float-Cast-Overflow) in cJSON_CreateNumber via NaN values

Status: Open.

#999 In DaveGamble/cJSON;

· FuzzAnything-ORG opened on Mar 28, 2026

[Vulnerability] Atomic Rollback Failure in cJSONUtils_ApplyPatchesCaseSensitive leads to "Dirty State" on error

Status: Open.

#997 In DaveGamble/cJSON;

· RageLiu opened on Mar 20, 2026

[Security] Logic Tampering via NULL byte (\u0000) Injection in cJSON_Utils Key Names

Status: Open.

#996 In DaveGamble/cJSON;

· RageLiu opened on Mar 20, 2026

[Security] Stack Overflow via Uncontrolled Recursion in cJSONUtils_MergePatch

Status: Open.

#995 In DaveGamble/cJSON;

· RageLiu opened on Mar 20, 2026

A minor OOM issue in harness fuzzing/cjson_read_fuzzer.c

Status: Open.

#992 In DaveGamble/cJSON;

· zchengchen opened on Mar 8, 2026

CMake Config uses absolute paths.

Status: Open.

#987 In DaveGamble/cJSON;

· izonfreak opened on Feb 19, 2026