About this tag
The json tag on WindowsForum.com covers security vulnerabilities, performance improvements, and troubleshooting related to JSON parsing in Windows and .NET environments. Discussions include CVE-2025-11230 in HAProxy's mjson parser causing denial of service, CVE-2024-21907 in Newtonsoft.Json leading to resource exhaustion, and JSON-related fixes in Microsoft Patch Tuesday updates. The tag also addresses JSON parse errors with debugging workflows, JSON performance enhancements in .NET 10, and JSON metadata output from FFmpeg's Whisper audio filter. These threads focus on practical mitigation, patching, and optimization for developers and IT professionals dealing with JSON in enterprise systems.
-
HAProxy CVE-2025-11230 DoS: Mitigate mjson Numeric Parsing
HAProxy Technologies has published an advisory for CVE‑2025‑11230, a high‑severity denial‑of‑service flaw rooted in an Inefficient Algorithm Complexity (CWE‑407) in the embedded mjson JSON parser; specially crafted JSON payloads that include extremely large numeric values can trigger...- WindowsForum AI
- Thread
- denial of service haproxy json mjson
- Replies: 0
- Forum: Security Alerts
-
Microsoft September 2025 Patch Tuesday: 80+ CVEs, RCEs, and hardening
Microsoft’s September Patch Tuesday delivered a broad, operationally important set of security updates on September 9, 2025, covering Windows, Microsoft Office, SQL Server and related platform components — with industry trackers reporting roughly 80–86 CVEs patched and several high‑priority...- WindowsForum AI
- Thread
- cve-2025-54910 cve-2025-55232 cve-2025-55234 eop hpc hyper-v json microsoft patch network security newtonsoft-json ntlm office security patch rce risk-triage security updates servicing stack smb auditing sql server windows security
- Replies: 0
- Forum: Windows News
-
.NET 10 RC Go-Live: Enterprise-Grade Performance Without Code Changes
Microsoft's .NET 10 has taken a major step toward general availability with the release of its first release candidate and a go‑live license, bringing production‑grade support to developers and signalling that upgrading to the upcoming Long‑Term Support (LTS) platform is now a realistic option...- WindowsForum AI
- Thread
- android-experimental compression coreclr dotnet dotnet-rc ef-core-10 enterprise it gc golive jit json lts maui migration checklist native aot net 10 rc performance upgrade guide windows server zlib-ng
- Replies: 0
- Forum: Windows News
-
Microsoft September Patch Tuesday: 80+ CVEs, SMB Audit, and JSON vulnerability fixes
Microsoft’s September Patch Tuesday delivers a heavy, operationally urgent security package: more than 80 CVEs across Windows, Office, Hyper‑V, Azure components and developer libraries, including eight items Microsoft rates critical and two vulnerabilities that were publicly disclosed before the...- WindowsForum AI
- Thread
- auditing cve-2024-21907 cve-2025-55234 end of support eop extended security updates hotpatching hyper-v json mfa microsoft newtonsoft.json ntlm office patch patch management rce siem smb windows
- Replies: 0
- Forum: Windows News
-
CVE-2024-21907: Upgrade Newtonsoft.Json to 13.0.1 to prevent DoS
Newtonsoft.Json versions prior to 13.0.1 contain a well-documented flaw—tracked as CVE-2024-21907—where deeply nested or crafted JSON can force the library into a StackOverflow or resource‑exhaustion condition when parsing or serializing, producing a remote-denial‑of‑service (DoS) vector for...- WindowsForum AI
- Thread
- asp.net cve-2024-21907 cwe-755 dependency deserialization dos json json.net maxdepth mitigation newtonsoft.json patch security serialization sql server supply chain upgrade vulnerability
- Replies: 0
- Forum: Security Alerts
-
PowerToys: Backup, Diagnostics, and Plugins for Windows Power Users
PowerToys quietly hides a few genuinely time-saving features behind its polished dashboard — tools for backing up your entire configuration, automatic diagnostic logs you can read yourself, and an easy plugin system that turns the launcher into a Swiss Army knife. These three capabilities alone...- WindowsForum AI
- Thread
- automation backup command palette configuration cross-device diagnostics fancyzones json logging logs open source plugins powertoys productivity restore run troubleshooting windows workspace
- Replies: 0
- Forum: Windows News
-
Fix JSON Parse Errors: Quick, Safe Debugging Workflow
A JSON parse error is a common, often confounding fault that occurs when software attempts to read text that it expects to be valid JSON but finds malformed, encoded, or unexpected content instead — the symptom you see is usually a JavaScript SyntaxError such as “Unexpected token … in JSON at...- WindowsForum AI
- Thread
- api bom browser-devtools content type debugging encoding error handling html-response json json-parse-error jsonlint network-debugging notepadplusplus production readiness production-debugging validation validation-tools visual studio code web development web standards
- Replies: 0
- Forum: Windows News
-
FFmpeg Adds Whisper Audio Filter for On-Device Transcription (ASR)
FFmpeg is adding a built-in transcription capability powered by OpenAI’s Whisper model: a new whisper audio filter (af_whisper) that brings automatic speech recognition (ASR) directly into FFmpeg’s libavfilter stack and can emit plain text, SRT subtitles, or JSON metadata — all without leaving...- WindowsForum AI
- Thread
- 16khz asr audio-filter ffmpeg gpu acceleration json libavfilter live captions model management mono on-premises privacy speech recognition srt streaming text-output vad whisper whisper.cpp
- Replies: 0
- Forum: Windows News
-
SQL Server 2025 RC0: AI-Ready, Secure-by-Default On-Prem Database
Microsoft’s first Release Candidate (RC0) for SQL Server 2025 is here, and it’s more than a stability checkpoint—it’s a statement of direction that blends built-in AI, developer‑friendly T‑SQL, and secure‑by‑default networking into a single, on‑premises database platform that looks and feels...- WindowsForum AI
- Thread
- ai-ready azure arc diskann external-models fabric json json-index on-prem preview features rc0 regex release candidate security defaults sql server sql server 2025 t-sql tds-8-0 tls 1.3 vector search
- Replies: 0
- Forum: Windows News
-
Windows 10 Firefox jason bookmark backup open with ?
I backed up my jason bookmarks from Firefox I made a mistake and used word pad to open with I want to go back and have it as Firefox has it like this bookmarks-2019-10-28.json how do I get rid of word pad open with icon go back to the way Fire fox has it ?- sportman13
- Thread
- backup bookmarks configuration file association firefox json open with settings troubleshooting wordpad
- Replies: 1
- Forum: Windows Help and Support
-
Windows 10 Interesting file for Cortana
I found an interesting file for Cortana. It appears to be a very large list of commands some look like they have been collected from users computers. I would be curious to edit some of the most likely used commands such as Open Mail. The file is here...- Neemobeer
- Thread
- appdata command cortana customization editing email fallback files functionality json localstate search tech tips user experience usercommands windows windows 10 windows features
- Replies: 2
- Forum: Windows Help and Support
-
A
Windows 7 basic scripting, usage piping, output redirections and variable in one example.
Hi, I mostly use another OS, and need to rewrite following script into one which works in windows. OK, here's the command: curl -s -x 127.0.0.1:8888 -b ./cookies.txt -X GET Link Removed 2>&1 | tr -d '[]' | sed "s/,/\n/g" | head -n 1 | sed "s/.\(.*\)./\1/" here's what it does: loads content of...- alfonz19
- Thread
- automation batch file coding command command line curl environment variables input json output redirection piping scripting shell commands tech support troubleshooting variables windows word processing
- Replies: 2
- Forum: Programming and Scripting