Security: uhop/stream-json
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
JSONC parser and verifier re-scan the whole accumulated comment on every input chunk, so a large block or line comment delivered across chunks costs O(n^2) CPU and stalls the event loop (remote unauthenticated DoS)GHSA-hqr4-qq8f-hg3x published
Aug 28, 2026 by uhopModerate -
Prototype pollution: Assembler writes this.current[this.key] on plain objectsGHSA-mjw6-4jj6-33hc published
Aug 28, 2026 by uhopModerate -
pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)GHSA-528h-pc64-c93x published
Jul 7, 2026 by uhopModerate
Learn more about advisories related to uhop/stream-json in the GitHub Advisory Database