AIKIDO-2026-10454
open-source-parsers.jsoncpp is vulnerable to Improper Input Validation
53
Medium Risk
This Affects:
open-source-parsers.jsoncppTL;DR
RFC 8259 requires control characters U+0000–U+001F inside JSON strings to be escaped. Reader::decodeString and OurReader::decodeString previously accepted unescaped control bytes without error. That diverges from the standard and can contribute to parser differentials or downstream mishandling of malformed input. The release adds an explicit check so those code paths fail parsing when an unescaped control character appears in a string.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
open-source-parsers.jsoncpp is vulnerable to Improper Input Validation in versions 0.7.0 - 1.9.6.
How to fix this
Upgrade the open-source-parsers.jsoncpp library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant