All pull requests

Pull requests

• fix: use own ClassLoader as parent when the context ClassLoader loads a foreign fastjson2

  #7873·ZedingZhang opened Sep 24, 2026·

  ·
  1

• fix: support root arrays in single-name JSONPath extraction

  #7870·pj-workspace opened Sep 22, 2026·

  ·
  1

  2

• fix: bound jsonb string length to remaining input

  #7867·Support-itecz opened Sep 14, 2026·

  ·
  1

• fix: guard out-of-bounds Unsafe read in field-name hash fast path, fo…

  #7866·WLLTB opened Sep 12, 2026·

  ·
  1

• fix: restore fastjson 1.x behavior of ignoring unknown keys in toJavaObject

  #7861·wylovelyi opened Sep 10, 2026·

  ·
  1

  1

• fix: honour ParserConfig.setAutoTypeSupport in fastjson1-compatible, for issue #7758

  #7860·wylovelyi opened Sep 7, 2026·

  ·
  11

• fix: resolve forward schema references in array items

  #7859·hansu650 opened Sep 6, 2026·

  ·
  1

  10

• fix: bound JSONB decimal scale to prevent excessive CPU usage

  #7858·wenshao opened Sep 5, 2026Member·

  ·
  1

  43

• fix: ClassCastException in JSON.toJSON() when a generic field's cached initWriter does not match the runtime value class, for issue #7853

  #7854·wylovelyi opened Sep 4, 2026·

  ·
  1

  16

• fix: avoid unsafe UTF-16 fast paths on aarch64 JDK 8

  #7852·xuzhaorui opened Sep 4, 2026·

  ·
  1

• fix: readHex accepts lowercase hex letters and decodes them correctly

  #7850·DenceChen opened Sep 4, 2026·

  ·
  1

• fix: StringToAny to Boolean rejects TRUE/True/T/Y spellings, for issue #7842

  #7848·WLLTB opened Sep 3, 2026·

  ·
  1

  14

• security: expand autoType deny list + implement addAutoTypeDeny (5 commits, closes 5 VULNs, tests included)

  #7846·DenceChen opened Sep 2, 2026·

  ·
  27

• fix: avoid unsafe grouped int writes on aarch64+jdk8

  #7834·yangpeng366 opened Aug 27, 2026·

  ·
  1

  3

• fix: guard readFieldName lookahead against AIOOBE on trailing backslash

  #7833·waterWang opened Aug 26, 2026·

  ·
  1

  4

• fix: guard exponent parsing against end-of-input in readNumber0

  #7832·waterWang opened Aug 26, 2026·

  ·
  1

  1

• fix: add null guard for writeEnum and enumCapacity in JSONB.IO (#7806)

  #7831·waterWang opened Aug 26, 2026·

  ·
  1

  3

• fix: guard against ArrayIndexOutOfBounds in skipComment for truncated comments

  #7830·waterWang opened Aug 26, 2026·

  ·
  1

  1

• fix: guard against ArrayIndexOutOfBounds in char2 for non-hex \x escape digits

  #7829·waterWang opened Aug 26, 2026·

  ·
  1

  1

• fix: guard against ArrayIndexOutOfBounds in readFieldName whitespace skip

  #7827·waterWang opened Aug 26, 2026·

  ·
  1

  1

• fix: bound truncated UTF-8 null tokens

  #7824·DarrenChangJR opened Aug 24, 2026·

  ·

• fix: validate JSONB decimal dump markers

  #7823·DarrenChangJR opened Aug 24, 2026·

  ·

• fix: validate compact JSONB number continuations

  #7822·DarrenChangJR opened Aug 24, 2026·

  ·
  2

  5

• fix: preserve negative zero in JSONB floating-point values

  #7821·DarrenChangJR opened Aug 24, 2026·

  ·

• fix: apply JSONReader context to SimpleDateFormat values

  #7820·DarrenChangJR opened Aug 24, 2026·

  ·