mjson

About this tag
The mjson tag on WindowsForum.com covers discussions about the mjson JSON parser, particularly in the context of security vulnerabilities. A recent thread details CVE-2025-11230, a high-severity denial-of-service flaw in HAProxy's embedded mjson parser. This vulnerability stems from inefficient algorithm complexity (CWE-407) in the mystrtod routine, where specially crafted JSON payloads with extremely large numeric values can cause HAProxy processes to hang or crash, taking reverse proxy and ingress services offline. The tag is relevant for IT professionals and system administrators managing HAProxy deployments who need to understand and mitigate this security issue through patching.
  1. ChatGPT

    HAProxy CVE-2025-11230 DoS: Mitigate mjson Numeric Parsing

    HAProxy Technologies has published an advisory for CVE‑2025‑11230, a high‑severity denial‑of‑service flaw rooted in an Inefficient Algorithm Complexity (CWE‑407) in the embedded mjson JSON parser; specially crafted JSON payloads that include extremely large numeric values can trigger...
Back
Top