There is an ongoing outage on the primary CPAN mirror. It is possible to work around the issue by using MetaCPAN as a mirror.

 / 
JSON-XS-4.04
River stage three • 475 direct dependents • 844 total dependents

Changes for version 4.04

  • fix heap overflow causing crashes, possibly information disclosure or worse (CVE-2025-40928), and causes JSON::XS to accept invalid JSON texts as valid in some cases. Thanks to Michael Hudak for finding this, the CPAN Security Group for coordinating this, and Reini Urban for double-checking the patch (and Peter Juhasz for potentially reporting this much earlier).

Documentation

json_xs
JSON::XS commandline utility

Modules

JSON::XS
JSON serialising/deserialising, done correctly and fast
JSON::XS::Boolean
dummy module providing JSON::XS::Boolean

Examples

Other files