JSON++ Project JSON++ (jsonxx) 1.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:json\+\+_project:json\+\+:1.0.0:*:*:*:*:*:*:*part: a version: 1.0.0 update: *
| Vendor | Json++ Project (9ea9dbb4-1a7f-5bfa-ae7d-7ca5843d6f52) |
|---|---|
| Product | Json++ (327112a5-bdb0-5437-8b9b-a447b11d7e3a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/json-c |
purl2cpe | 2026-10-12 21:11:55.537682 |
pkg:deb/ubuntu/json-c |
purl2cpe | 2026-10-12 21:11:55.537686 |
pkg:github/json-c/json-c |
purl2cpe | 2026-10-12 21:11:55.537688 |
pkg:gitlab/redhat/json-c |
purl2cpe | 2026-10-12 21:11:55.537691 |
pkg:rpm/centos/json-c |
purl2cpe | 2026-10-12 21:11:55.537694 |
pkg:rpm/fedora/json-c |
purl2cpe | 2026-10-12 21:11:55.537697 |
pkg:rpm/opensuse/json-c |
purl2cpe | 2026-10-12 21:11:55.537699 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-23460 |
vulnerable | 2026-06-08 05:40:57.575738 |
Stack overflow in Jsonxx
MEDIUM (5.9)
Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx json parsing may lead to stack exhaustion in an address sanitized (ASAN) build. This issue may lead to Denial of Service if the program using the jsonxx library crashes. This issue exists on the current commit of the jsonxx project and the project itself has been archived. Updates are not expected. Users are advised to find a replacement.
Published: 2022-08-19T20:10:08.000Z
Updated: 2025-04-23T17:48:29.948Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23459 |
vulnerable | 2026-06-08 05:40:57.572356 |
Double free or Use after Free in Value class of Jsonxx
HIGH (8.1)
Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx use of the Value class may lead to memory corruption via a double free or via a use after free. The value class has a default assignment operator which may be used with pointer types which may point to alterable data where the pointer itself is not updated. This issue exists on the current commit of the jsonxx project. The project itself has been archived and updates are not expected. Users are advised to find a replacement.
Published: 2022-08-19T19:00:16.000Z
Updated: 2025-04-23T17:48:38.192Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.