CVE-2026-104182
1 advisory.
npm/stream-json CVE-2026-104182: medium 6.2
stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk
Action: Upgrade stream-json to 3.6.0 or later.
npm i stream-json@3.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.6.0 | - |
Fixed versions
| 3.6.0 |
Sources
- osv: GHSA-hqr4-qq8f-hg3x
- https://github.com/uhop/stream-json/security/advisories/GHSA-hqr4-qq8f-hg3x
- https://nvd.nist.gov/vuln/detail/CVE-2026-104182
- https://github.com/uhop/stream-json/commit/c0299dc168ce9455ef5ca5b6a0f6850ee7fa0468
- https://github.com/uhop/stream-json
- https://github.com/uhop/stream-json/releases/tag/3.6.0
CVE-2026-104182 · published · modified · JSON