CVE-2026-113602

The json-smart library, in versions through 2.6.0 , is vulnerable to an input validation bypass (CWE-147). By inserting a literal 0x1A character , an attacker can evade strict-mode trailing-data checks . This allows the inclusion of malformed content that successfully passes JSONValue.parseStrict...