Issues

• ucl_object_copy() of a UCL_USERDATA object runs the destructor twice

  vstakhov/libucl#431 · Filter by author tregua87 opened on Oct 7, 2026

• A scalar value overwrites an existing container (leaks its contents) under UCL_DUPLICATE_MERGE

  vstakhov/libucl#430 · Filter by author tregua87 opened on Oct 7, 2026

• ucl_parser_insert_chunk() turns a scalar into a container, then SEGVs in ucl_parser_free()

  vstakhov/libucl#422 · Filter by author tregua87 opened on Oct 7, 2026

• UCL_DUPLICATE_ERROR leaks the rejected key object

  vstakhov/libucl#420 · Filter by author tregua87 opened on Oct 7, 2026
  1

• Fix NULL stack dereference after an empty chunk

  vstakhov/libucl#410 · Filter by author tregua87 opened on Oct 3, 2026

• OOB read in ucl_object_lookup_path_char with a NUL separator

  vstakhov/libucl#407 · Filter by author tregua87 opened on Oct 2, 2026

• UBSan: undefined behavior in ucl_hash_destroy (function pointer type mismatch)

  vstakhov/libucl#395 · Filter by author jokeez opened on Jun 25, 2026

• SEGV in schema pattern validation on non-NUL-terminated binary strings

  vstakhov/libucl#390 · Filter by author lbw15507 opened on Jun 11, 2026

• Stack overflow in JSON schema validation with cyclic $ref

  vstakhov/libucl#389 · Filter by author lbw15507 opened on Jun 11, 2026

• Use-after-free in ucl_hash_sort when comparing dangling object keys

  vstakhov/libucl#388 · Filter by author lbw15507 opened on Jun 11, 2026

• Use-after-free in .inherit handling via ucl_object_copy_internal

  vstakhov/libucl#387 · Filter by author lbw15507 opened on Jun 11, 2026

• [BUG] Msgpack length parsing uses pointer cast instead of memcpy (unaligned access)

  vstakhov/libucl#374 · Filter by author MarkLee131 opened on Apr 3, 2026

• Potential heap buffer overflow in macro parsing (ucl_parse_macro_value)

  vstakhov/libucl#367 · Filter by author AlthafN opened on Apr 1, 2026
  1

• Lua install broken

  vstakhov/libucl#360 · Filter by author Humanoid-Human opened on Feb 4, 2026

• ZEROCOPY does not work with file parsing functions

  vstakhov/libucl#352 · Filter by author hgarrereyn opened on Feb 2, 2026

• ucl_object_fromlstring implementation contradicts doc/api.md

  vstakhov/libucl#349 · Filter by author K-ANOY opened on Jan 27, 2026
  1

• bug: incorrect definition of so_version results in SO version numbers going backwards

  vstakhov/libucl#348 · Filter by author strophy opened on Jan 12, 2026
  1

• Security Issue: Use-After-Free (and secondary UUM) in libucl hash lookup/insert

  vstakhov/libucl#347 · Filter by author Kaldreic opened on Nov 11, 2025

• Security Issue: Use of Uninitialized Memory in libucl

  vstakhov/libucl#346 · Filter by author Kaldreic opened on Nov 11, 2025
  9

• CMake version bump

  vstakhov/libucl#341 · Filter by author Dautor opened on Oct 19, 2025

• META: Issue Labelling

  vstakhov/libucl#335 · Filter by author ThomasAdam opened on Aug 8, 2025

• [DISCUSSION]: IRC channel -- #libucl on irc.libera.chat

  vstakhov/libucl#332 · Filter by author ThomasAdam opened on Jul 30, 2025

• [META]: Potential AI Slop Issues

  vstakhov/libucl#331 · Filter by author ThomasAdam opened on Jul 30, 2025
  1

• Build: CMake, Autotools, or both?

  vstakhov/libucl#330 · Filter by author ThomasAdam opened on Jul 30, 2025

• Collection of Fuzzing-Discovered Bugs

  vstakhov/libucl#327 · Filter by author sdjasj opened on May 26, 2025
  2