Security fixes are made on the latest release.
Please do not open a public issue for a security problem. Use the private vulnerability reporting form of this repository, and include the input that triggers the problem and the compiler you used.
- The parser returns a tree or throws
json::parser_error. Catch it. - Nesting is limited by
json::config::max_depth(default 256). Lower it if you do not need deep documents. - The parser keeps the whole document in memory, in addition to the tree built from it. Limit the size of the input you accept.
json::configholds global variables. Set them once at startup.