json-smart CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM json-smart CVE published 2026-10-20

CVE-2026-113602

CVE-2026-113602 json-smart through 2.6.0 Strict-Mode Validation Bypass via 0x1A Character AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-20T15:40:29.753Z and has not been modified since then. This vulnerability allows attackers to bypass strict-mode validation by inserting a 0x1A character, potentially creating parser differentials with downstre [truncated]