stream-json vulnerabilities (TuxCare)

2 vulnerabilities.

• stream-json TuxCare stream-json: Prototype pollution: Assembler writes this.current[this.key] on plain objects CVE-2026-104183 Fix available 5.1 MediumOctober 1, 2026
• stream-json TuxCare stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS) CVE-2026-71429 Fix available 6.2 MediumSeptember 3, 2026