CVE-2026-73071

Vim vulnerability CVE-2026-73071 affects 9.2.0511–9.2.0844, where json_decode_item() in src/json.c can retain a stale pointer after json_decode_string() calls channel_fill() to refill and free the current buffer. This causes the error path to read freed memory when an invalid JSON string spans bu...