Curated security research, vulnerabilities, advisories and tools for practitioners.

#json

Security coverage tagged json.

1.

Hybrid Protocol: The JSON Upgrade

blog | 2026-02-23 00:00 | bughunters.google.com | original ↗ | #passkeys | #authentication | #fido

2.

Unexpected security footguns in Go's parsers

blog | 2025-06-18 11:00 | CVE-2020-16250 | blog.trailofbits.com | original ↗ | #authentication-bypass | #deserialization | #go

3.

Why REST Supplanted SOAP for Cross-Application Communication

blog | 2024-03-11 03:19 | hackerone.com | original ↗ | #http | #soap | #json

4.

Safely Handling Large Integers in JSON: Best Practices and Pitfalls

blog | 2024-01-12 09:24 | hackerone.com | original ↗ | #javascript | #json | #bigint

5.

An Exploration of JSON Interoperability Vulnerabilities

blog | 2021-02-25 00:00 | bishopfox.com | original ↗ | #vulnerability-research | #security-research | #json

6.

Graphtage: A New Semantic Diffing Tool

blog | 2020-08-28 11:00 | blog.trailofbits.com | original ↗ | #open-source | #tooling | #json

7.

The new configuration library

blog | 2018-08-16 15:35 | portswigger.net | original ↗ | #burp-suite | #portswigger | #scanner

8.

Capture The Flag Solution: reversing the password

blog | 2017-08-13 00:00 | hackerone.com | original ↗ | #ctf | #reverse-engineering | #json