Repository Issue Activity (beta)

#1073 Remediate cJSON vulnerabilities CVE-2026-67215 and CVE-2026-67216

#1074 buffer_skip_whitespace accepts every byte below 0x21 as whitespace

#838 Regression on double precision in print_number() when fix a clang compile warning

#1071 compare_double mishandles infinities: equal infinities compare unequal, opposite infinities may compare equal

#1070 decode_array_index_from_pointer wraps size_t on long decimal tokens

#1072 cJSON_Utils: several paths dereference cJSON_malloc failure

#1069 decode_pointer_inplace writes RFC 6901 ~1 to the wrong index

#1050 [Security] JSON Pointer ~1 decoding error vulnerability inside decode_pointer_inplace

#1067 coverity Scan the Code Results

#1062 [Windows/Clang] Build failure in cJSON

#963 error: conversion from 'double' to 'float' may change value [-Werror=float-conversion]

#1060 Heap-Use-After-Free in cJSON merge_patch() via cJSONUtils_MergePatch()(Not found in existing CVE records or git history)

#1007 Code Review found 2 critical bugs

#1049 Bug: Missing NULL check for cJSON_malloc in FindPointerFromObjectTo leads to crash under OOM / allocation failure

#1054 [benchmark] Request for call-path / fairness review (GLD.SerializerBenchmark)

#1051 Copyright year inconsistency: main 2009-2020, cJSON.h ends at 2017

#1048 Security/Bug: Null Pointer Dereference in cJSONUtils_strdup leads to Denial of Service (DoS)

#1040 [Bug] Null Pointer Dereference in compose_patch() when cJSON_malloc fails

#1028 CMake needs to update to at least 3.15 levels.

#1035 NULL Pointer Dereference in cJSON_GetErrorPtr When cJSON_Parse Receives NULL Input

#892 Raise PR against `master` for customer-requested changes

#1023 NULL deref in cJSON_GetObjectItemCaseSensitive when called on array (develop)

#1021 cjson: heap-buffer-overflow in cJSON_ParseWithOpts (cJSON.c:1136:21)

#1022 Heap-Use-After-Free in `cJSONUtils_MergePatch` via Recursive Deletion

#1020 Memory-safe Rust implementation of cJSON with drop-in C ABI