stream-json
npm4 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting stream-jsonpage 1 of 1
- CVE-2026-104182MEDIUMCVSS 6.2EG 6.2fixed in 3.6.02026-10-01
stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.6.0, the JSONC parser at stream-json/jsonc/parser.js and verifier at stream-json/jsonc/verifier.js restart commen…
- CVE-2026-104183MEDIUMCVSS 5.1EG 5.1fixed in 3.6.02026-10-01
stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.6.0, Assembler materializes object properties with plain assignment, so an input key named __proto__ invokes the …
- CVE-2026-114129MEDIUMCVSS 6.2EG 6.2fixed in 3.7.02026-10-21
stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. From 2.0.0 until 3.7.0, FlexAssembler compiles string and regular-expression path filters into matchers that join the full k…
- CVE-2026-71429MEDIUMCVSS 6.2EG 6.2fixed in 3.5.02026-09-03
stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.5.0, the path filters pick, ignore, filter, and replace in src/core/filters/filter-base.js recompute the full pat…
Check whether stream-json is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for stream-json CVEs against the assets you own.
Book a Demo →