Proof Portal

jsonparser

ProbeLabsviewing a historical run

Viewing historical run 775a6ccAug 3, 2026, 11:10 AMproof-demoBack to current

Issue Catalogue

The issue catalogue as recorded at the pinned historical run — known issues, defects, trace gaps and failing checks reconstructed from that audit.

Open known issues by severity

10 open

All36

Known Issues15

Problem Reports8

Accepted Risks0

Checks13

Known Issues: Confirmed, current problems in the system — the open failure modes to act on.

10 open known issues · 5 fixed/withdrawn hidden — toggle All to include.

	Kind	Finding	Status		Context
HighCVSS 7.5	Known issue	decodeSingleUnicodeEscape length guard too small — OOB read + panic on a truncated \uXX escape KI-5	Open	Inception	RequirementsWhen ParseString receives a string literal containing a…SYS-REQ-060 When ParseString receives a well-formed raw JSON string…SYS-REQ-014 +1 more	Investigate
HighCVSS 7.5	Known issue	decodeUnicodeEscape lone-high-surrogate guard reads in[6]/in[7] with a too-small length check — OOB panic KI-8	Open	Inception	RequirementsWhen ParseString encounters a UTF-16 high surrogate escape…SYS-REQ-062 When ParseString encounters a UTF-16 high surrogate escape…SYS-REQ-061	Investigate
HighCVSS 7.5	Known issue	ParseBoolean uses prefix match instead of exact equality — "trueish"/"falsehood" accepted as booleans KI-11	Open	Inception	RequirementsWhen ParseBoolean receives a valid raw boolean token, the…SYS-REQ-012 When ParseBoolean receives an invalid boolean token, the…SYS-REQ-036 +1 more	Investigate
HighCVSS 7.5	Known issue	parseInt fast-path threshold off-by-one — 19-digit integers skip overflow check and wrap silently KI-7	Open	Inception	RequirementsWhen ParseInt receives an integer token whose magnitude…SYS-REQ-039 When GetInt addresses a JSON number token whose magnitude…SYS-REQ-076 +2 more	Investigate
HighCVSS 7.5	Known issue	unescapeToUTF8Config length guard off-by-one — OOB panic reading in[1] on a lone trailing backslash KI-6	Open	Inception	RequirementsWhen ParseString encounters a string literal ending with a…SYS-REQ-063 When ParseString receives a malformed encoded string…SYS-REQ-038	Investigate
MediumCVSS 5.3	Known issue	arrayEachConfig empty-array sentinel checks for '}' instead of ']' — a valid `[]` is rejected as malformed KI-10	Open	Inception	RequirementWhen ArrayEach addresses a well-formed empty JSON array,…SYS-REQ-028	Investigate
MediumCVSS 5.3	Known issue	h2I upper-hex bound off-by-one — byte 'G' decodes as hex 16, so `\uGxxx` is silently accepted KI-9	Open	Inception	RequirementsWhen ParseString receives a well-formed raw JSON string…SYS-REQ-014 When ParseString receives a string literal containing a…SYS-REQ-060	Investigate
LowCVSS 3.7	Known issue	nextTokenConfig drops the tab from its whitespace set — parsing fails on tab-formatted JSON KI-13	Open	Inception	RequirementsWhen the JSON input is well formed, a key path is provided,…SYS-REQ-001 When the input is malformed outside the addressed token…SYS-REQ-026	Investigate
LowCVSS 3.7	Known issue	unescapeToUTF8Config drops '/' from the accepted escapes — the valid JSON escape `\/` is rejected as malformed KI-14	Open	Inception	RequirementsWhen ParseString receives a well-formed raw JSON string…SYS-REQ-014 When ParseString receives a malformed encoded string…SYS-REQ-038	Investigate
Info	Known issue	arrayEachConfig empty-input guard returns the wrong documented error type (MalformedJsonError vs MalformedObjectError) KI-12	Open	Inception	RequirementWhen ArrayEach receives malformed or otherwise unusable…SYS-REQ-029	Investigate