Under https://github.com/lovasoa/bad_json_parsers [visited 2019-11-10T13:19:56Z],
one can find a test generator for JSON parsers that in particular exposes bugs in JSON parsers that
use recursion to parse nested structures.
Hacker News discussion [visited 2019-11-10T13:17:39Z].
Zip bombs
David Fifield - A better zip bomb
Article [originally written 2019-07-02; updated 2019-07-03; visited 2019-07-04T13:47:58Z]