Json Smartproject Json Smart
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Json Smartproject Json Smart.
By the Year
In 2026 there have been 1 vulnerability in Json Smartproject Json Smart with an average score of 6.9 out of ten. Json Smart did not have any published security vulnerabilities last year. That is, 1 more vulnerability have already been reported in 2026 as compared to last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 6.90 |
| 2025 | 0 | 0.00 |
| 2024 | 0 | 0.00 |
| 2023 | 1 | 7.50 |
It may take a day or so for new Json Smart vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Json Smartproject Json Smart Security Vulnerabilities
json-smart <=2.6.0 Input Validation Bypass (0x1A)
CVE-2026-113602
6.9 - Medium
- October 20, 2026
json-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to evade strict-mode trailing-data checks by inserting a literal 0x1A character. Attackers can append 0x1A and malformed content to pass JSONValue.parseStrict or isValidJsonStrict validation, creating parser differentials with downstream parsers like Jackson or Gson.
Improper Neutralization of Input Terminators
Json-smart: Deep Nesting Causing Stack Overflow
CVE-2023-1370
7.5 - High
- March 22, 2023
[Json-smart](https://netplex.github.io/json-smart/) is a performance focused, JSON processor lib. When reaching a [ or { character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any limit to the nesting of such arrays or objects. Since the parsing of nested arrays and objects is done recursively, nesting too many of them can cause a stack exhaustion (stack overflow) and crash the software.
Stack Exhaustion
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Json Smartproject Json Smart or by Json Smartproject? Click the Watch button to subscribe.
