Uhop / Stream-Json

3 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-104183	stream-json: Prototype pollution: Assembler writes this.current[this.key] on plain objects	MEDIUM	5.1	Oct 1, 2026
CVE-2026-104182	stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk	MEDIUM	6.2	Oct 1, 2026
CVE-2026-71429	stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)	MEDIUM	6.2	Sep 3, 2026

Rows per page

Showing 1 to 3 of 3 CVEs