What’s Vulnerable › Products

uhop stream-json vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your uhop stream-json version is affected

Latest uhop stream-json vulnerabilities

• CVE-2026-114129 — stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of service (CVSS 6.2)
• CVE-2026-104183 — stream-json: Prototype pollution: Assembler writes this.current[this.key] on plain objects (CVSS 5.1)
• CVE-2026-104182 — stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk (CVSS 6.2)
• CVE-2026-71429 — stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS) (CVSS 6.2)