Issues

• CMake config files contain absolute install paths

  DaveGamble/cJSON#1094 · Filter by author tawmoto opened on Sep 30, 2026

• Stack-overflow via deep JSON array nesting under ASan+-O0, below CJSON_NESTING_LIMIT

  DaveGamble/cJSON#1093 · Filter by author nhaajtt opened on Sep 30, 2026

• [BUG] Use-After-Free (8-byte pointer write) in cJSON_Utils.c: sort_list() breaks the child->prev invariant

  DaveGamble/cJSON#1090 · Filter by author ReisterJ opened on Sep 21, 2026

• Use-after-free in cJSONUtils_ApplyPatches when a patch removes the patch array

  DaveGamble/cJSON#1082 · Filter by author Fengxiaoxx opened on Sep 17, 2026

• Use-after-free in cJSON_ReplaceItemInObject when the key is the item's own name

  DaveGamble/cJSON#1081 · Filter by author Fengxiaoxx opened on Sep 17, 2026

• Project Maintenance Status and Recommendation to Fork

  DaveGamble/cJSON#1080 · Filter by author Alanscut opened on Sep 16, 2026

• [GLD Serializer Benchmark] C cJSON 1.7.19 — spec compliance misses

  DaveGamble/cJSON#1079 · Filter by author leo-gan opened on Sep 14, 2026

• buffer_skip_whitespace accepts every byte below 0x21 as whitespace

  DaveGamble/cJSON#1074 · Filter by author nassersala opened on Sep 3, 2026

• Remediate cJSON vulnerabilities CVE-2026-67215 and CVE-2026-67216

  DaveGamble/cJSON#1073 · Filter by author eshita19 opened on Sep 1, 2026
  1

• compare_double mishandles infinities: equal infinities compare unequal, opposite infinities may compare equal

  DaveGamble/cJSON#1071 · Filter by author anonymous756fsd opened on Aug 28, 2026

• coverity Scan the Code Results

  DaveGamble/cJSON#1067 · Filter by author ilikui opened on Aug 24, 2026

• [Windows/Clang] Build failure in cJSON

  DaveGamble/cJSON#1062 · Filter by author wissem01chiha opened on Aug 2, 2026
  1

• [benchmark] Request for call-path / fairness review (GLD.SerializerBenchmark)

  DaveGamble/cJSON#1054 · Filter by author leo-gan opened on Jul 17, 2026

• [Security] JSON Pointer ~1 decoding error vulnerability inside decode_pointer_inplace

  DaveGamble/cJSON#1050 · Filter by author eglonnnn opened on Jul 4, 2026
  1

• Bug: Missing NULL check for cJSON_malloc in FindPointerFromObjectTo leads to crash under OOM / allocation failure

  DaveGamble/cJSON#1049 · Filter by author timeflies123 opened on Jul 3, 2026
  1

• Security/Bug: Null Pointer Dereference in cJSONUtils_strdup leads to Denial of Service (DoS)

  DaveGamble/cJSON#1048 · Filter by author timeflies123 opened on Jul 3, 2026

• [Bug] Null Pointer Dereference in compose_patch() when cJSON_malloc fails

  DaveGamble/cJSON#1040 · Filter by author BoxStrikesTeam opened on Jun 27, 2026

• NULL Pointer Dereference in cJSON_GetErrorPtr When cJSON_Parse Receives NULL Input

  DaveGamble/cJSON#1035 · Filter by author sdnuhfiu opened on Jun 11, 2026

• CMake needs to update to at least 3.15 levels.

  DaveGamble/cJSON#1028 · Filter by author llothar opened on May 24, 2026
  2

• NULL deref in cJSON_GetObjectItemCaseSensitive when called on array (develop)

  DaveGamble/cJSON#1023 · Filter by author dkgkdfg65 opened on May 19, 2026

• Heap-Use-After-Free in cJSONUtils_MergePatch via Recursive Deletion

  DaveGamble/cJSON#1022 · Filter by author JasonHonKL opened on May 17, 2026

• Memory-safe Rust implementation of cJSON with drop-in C ABI

  DaveGamble/cJSON#1020 · Filter by author ThomasJenkinson opened on May 16, 2026

• Fails to build with GCC 16

  DaveGamble/cJSON#1016 · Filter by author sergiodj opened on May 6, 2026

• Build fails with -Werror: warning: passing argument 1 of ‘__inline_isnanf’ as ‘float’ rather than ‘double’ due to prototype

  DaveGamble/cJSON#1012 · Filter by author barracuda156 opened on May 1, 2026

• cJSON_Utils may dereference NULL valuestring after cJSON_IsString() checks

  DaveGamble/cJSON#1011 · Filter by author Yanhaoxi opened on Apr 23, 2026