These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-29036 is a high-severity vulnerability in cJSON, a popular JSON parsing library. The vulnerability allows unauthenticated attackers to cause JSON Patch operations to target wrong object keys by supplying crafted JSON Pointer escape sequences. This can lead to silent data corruption or deletion of unintended keys, potentially bypassing authorization controls in applications that rely on JSON Patch [truncated]
An attacker who can supply a patch document to the cJSON library can destroy addressable members of the target document even though the API reports that the patch failed. This occurs because cJSON applies RFC 6902 JSON Patch operations non-atomically, allowing the target document to be mutated while cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive() returns a failure status.
CVE-2026-67216 is a denial-of-service vulnerability in the cJSON library, specifically in the `cJSON_Compare()` function. The function has an inefficient algorithmic complexity flaw, which can cause a denial-of-service condition when comparing deeply nested JSON objects. This vulnerability can be triggered when an application calls `cJSON_Compare()` on attacker-influenced JSON that is structurally equal t [truncated]
CVE-2026-67215 is a vulnerability in the cJSON library, which can lead to a denial-of-service (DoS) attack when an untrusted RFC 6902 JSON Patch is applied. The vulnerability is caused by uncontrolled recursion leading to stack exhaustion. An attacker who can supply the patch document can crash the process, resulting in a denial of service. This vulnerability affects systems that use the cJSON library and [truncated]
The cJSON library has an integer overflow vulnerability in the print_string_ptr() function on 32-bit platforms. This occurs when processing strings with approximately 858,993,460 or more control characters, causing the output buffer to be allocated based on an underestimated length. When cJSON_PrintBuffered() is used with a pre-allocated buffer, the subsequent write loop overflows the heap allocation. An [truncated]