All pull requests

Pull requests

• reject overflowing array index in decode_array_index_from_pointer

  #1103·nabhan06 opened Oct 15, 2026·

  ·

• cJSON_Utils: survive allocation failures in the patch/merge/pointer helpers

  #1102·bg0d-droid opened Oct 15, 2026·

  ·

• fix escaped backslash handling in minify_string

  #1101·nabhan06 opened Oct 14, 2026·

  ·

• Fix exact double recovery when printing numbers

  #1099·sergioperezcheco opened Oct 11, 2026·

  ·
  1

• fix ~0/~1 unescaping in decode_pointer_inplace

  #1098·nabhan06 opened Oct 8, 2026·

  ·

• Link the dual-build static library with libm

  #1097·fhgffy opened Oct 5, 2026·

  ·

• Fix: correct __GNUCC__ typo in cJSON_Utils.c

  #1096·Fojdjebu opened Oct 5, 2026·

  ·

• cJSON_Utils, cJSON: harden pointer bounds, null checks, and merge patch case sensitivity

  #1095·filtede98 opened Oct 1, 2026·

  ·

• Fix Heap-Use-After-Free in cJSONUtils_MergePatch via Recursive Deletion

  #1092·PGZXB opened Sep 24, 2026·

  ·
  1

• Fix use-after-free in cJSONUtils_SortObject: restore child->prev tail invariant

  #1091·nvnzno-a11y opened Sep 22, 2026·

  ·
  1

• Don't leak the parsed tree in the fuzzing harness

  #1089·prownd opened Sep 20, 2026·

  ·
  1

• Suppress -Wcast-qual in cast_away_const for clang without __GNUC__

  #1088·prownd opened Sep 20, 2026·

  ·
  1

• Check for a parent without children in cJSON_DetachItemViaPointer

  #1087·prownd opened Sep 20, 2026·

  ·
  1

• Fix cJSON_Minify for strings ending with an escaped backslash

  #1086·prownd opened Sep 20, 2026·

  ·

• Fix typos, macro hygiene and preprocessor mistakes

  #1085·prownd opened Sep 20, 2026·

  ·

• cJSON_Utils: fix use-after-free in ApplyPatches when a patch removes the patch array

  #1084·iliasabk opened Sep 19, 2026·

  ·
  1

• replace_item_in_object: fix use-after-free when key aliases item name

  #1083·iliasabk opened Sep 18, 2026·

  ·
  1

• guard recursive comparisons against stack exhaustion

  #1078·atharvmantri opened Sep 14, 2026·

  ·
  1

• Fix parsing of exact-length JSON with a UTF-8 BOM

  #1077·Sn0wyDay opened Sep 12, 2026·

  ·
  1

• parser: accept only RFC 8259 whitespace between tokens

  #1076·AetherAI3 opened Sep 6, 2026·

  ·
  1

• Fix null pointer dereference in compose_patch when malloc fails

  #1068·SAY-5 opened Aug 26, 2026·

  ·
  1

• fix: NULL Pointer Dereference in cJSON_GetErrorPtr When cJSON_Parse Receives NULL Input #1035

  #1066·rishi-ragavan opened Aug 21, 2026·

  ·
  1

• Fix: add depth check to prevent stack overflow in cJSON_Utils (#995)

  #1064·tung515 opened Aug 14, 2026·

  ·
  1

• ci: add permissions block and update actions/checkout to v4

  #1063·Alb3e3 opened Aug 13, 2026·

  ·

• Fix: -Wfloat-conversion error in print_number on MinGW

  #1061·coveyjorjet opened Aug 1, 2026·

  ·
  1

  1