Nixpkgs Security Tracker

Login with GitHub

Details of issue NIXPKGS-2025-0006

NIXPKGS-2025-0006
published on 1 Nov 2025
updated 2 months, 3 weeks ago by @LeSuisse Activity log
  • Created automatic suggestion
  • @LeSuisse removed
    6 packages
    • perlPackages.CpanelJSONXS
    • perl538Packages.CpanelJSONXS
    • perl540Packages.CpanelJSONXS
    • perlPackages.JSONXSVersionOneAndTwo
    • perl538Packages.JSONXSVersionOneAndTwo
    • perl540Packages.JSONXSVersionOneAndTwo
  • @LeSuisse accepted as draft
  • @LeSuisse published on GitHub
JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

Affected products

JSON-XS
  • <4.04

Matching in nixpkgs

pkgs.perlPackages.JSONXS

JSON serialising/deserialising, done correctly and fast

  • nixos-unstable -

pkgs.perl538Packages.JSONXS

JSON serialising/deserialising, done correctly and fast

  • nixos-unstable -

pkgs.perl540Packages.JSONXS

JSON serialising/deserialising, done correctly and fast

  • nixos-unstable -