Proof Portal

jsonparser

ProbeLabs24 findings · 123 requirements

Issue Catalogue

Known issues are the live problems to act on — the default view. Browse fixed defects, accepted risks, trace gaps and failing checks by kind, or switch to All for every finding.

0 candidates waiting for confirmation

Project totals include withheld issues. Their severity is public; details and locations remain private until disclosure.

Open known issues by severity

10 open

All24

Known Issues16

Problem Reports8

Accepted Risks0

Checks0

Known Issues: Confirmed, current problems in the system — the open failure modes to act on.

10 open known issues · 6 fixed/withdrawn hidden — toggle All to include.

Withheld rows include every withheld record; their kind and state are undisclosed. The headline counts the selected scope.

	Kind	Finding	Status	PoC quality		Context
HighCVSS 7.5	Known issue	decodeSingleUnicodeEscape length guard too small — OOB read + panic on a truncated \uXX escape KI-5	Open	Passed	Inception	RequirementsWhen ParseString receives a string literal containing a…SYS-REQ-060 When ParseString receives a well-formed raw JSON string…SYS-REQ-014 +1 more	Investigate
HighCVSS 7.5	Known issue	decodeUnicodeEscape lone-high-surrogate guard reads in[6]/in[7] with a too-small length check — OOB panic KI-8	Open	Passed	Inception	RequirementsWhen ParseString encounters a UTF-16 high surrogate escape…SYS-REQ-062 When ParseString encounters a UTF-16 high surrogate escape…SYS-REQ-061	Investigate
HighCVSS 7.5	Known issue	ParseBoolean uses prefix match instead of exact equality — "trueish"/"falsehood" accepted as booleans KI-11	Open	Passed	Inception	RequirementsWhen ParseBoolean receives a valid raw boolean token, the…SYS-REQ-012 When ParseBoolean receives an invalid boolean token, the…SYS-REQ-036 +1 more	Investigate
HighCVSS 7.5	Known issue	parseInt fast-path threshold off-by-one — 19-digit integers skip overflow check and wrap silently KI-7	Open	Passed	Inception	RequirementsWhen ParseInt receives an integer token whose magnitude…SYS-REQ-039 When GetInt addresses a JSON number token whose magnitude…SYS-REQ-076 +2 more	Investigate
HighCVSS 7.5	Known issue	unescapeToUTF8Config length guard off-by-one — OOB panic reading in[1] on a lone trailing backslash KI-6	Open	Passed	Inception	RequirementsWhen ParseString encounters a string literal ending with a…SYS-REQ-063 When ParseString receives a malformed encoded string…SYS-REQ-038	Investigate

Showing 5 of 14

Proof

History & reports