Search results

[security disclosure] Unbounded numeric literal parsing causes resource exhaustion (DoS) — missing number length limit

Active discussion

Assigned

Status: Open.

#1063 In stleary/JSON-java;

· waydeshi opened on Jun 18, 2026

org.json.XML.unescape("
"); throws org.json.JSONException: Invalid numeric character reference: 


Active discussion

Available for someone to work on

Status: Open.

#1059 In stleary/JSON-java;

· S-wald opened on Jun 8, 2026

JSONObject.toString() throws StackOverflowError (not JSONException) on self-referential cycles

Active discussion

Status: Open.

#1056 In stleary/JSON-java;

· zhangjiashuo-cs opened on May 24, 2026

Inconsistent null Handling Across JSONObject Construction Paths

Active discussion

Investigating

Status: Open.

#1049 In stleary/JSON-java;

· venkat-cheenu opened on Apr 4, 2026

Donate to GIrls Who Code

Keep issue open

No changes at this time

Status: Open.

#975 In stleary/JSON-java;

· nielsbasjes opened on May 9, 2025

Update builds to support strictMode testing

In progress

Status: Open.

#953 In stleary/JSON-java;

· stleary opened on Feb 15, 2025

Which JSONParserConfiguration to use in JSONObject/JSONArray constructors

Available for someone to work on

Status: Open.

#945 In stleary/JSON-java;

· stleary opened on Jan 13, 2025

JSONObject and JSONArray initial flag for tokener may be flawed

Available for someone to work on

Status: Open.

#944 In stleary/JSON-java;

· stleary opened on Jan 13, 2025

Suggestion: Add more constructors with parameters for JSONParserConfiguration

No changes at this time

Status: Open.

#939 In stleary/JSON-java;

· Simulant87 opened on Jan 11, 2025

Automatically update Javadoc with GitHub Actions

Active discussion

Status: Open.

#873 In stleary/JSON-java;

· ayvacs opened on Feb 29, 2024

Problem with optLong, getLong when parsing JSONObject and XML

Completed

Keep issue open

Status: Open.

#868 In stleary/JSON-java;

· stleary opened on Feb 24, 2024

JSONObject.toString does not use an Enum's toString() but its name()

Available for someone to work on

Status: Open.

#838 In stleary/JSON-java;

· arthurBricq opened on Dec 11, 2023