Teire
Changes
Scan
Docs
Trust
← All changes
stream-json (npm) · Teire
Changes
Scan
Docs
Trust
Sign in
Worker running
stream-json
npm
latest
3.8.0
· 2026-10-29
www.npmjs.com · all 58 versions
Security advisories
3
stream-json: stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)
fixed in 3.5.0
stream-json: stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk
fixed in 3.6.0
stream-json: stream-json has a prototype pollution issue: Assembler writes this.current[this.key] on plain objects
fixed in 3.6.0
Versions that change something
3.5.0
2026-07
fixes 1 advisory
3.6.0
2026-08
fixes 2 advisories