CVE Intelligence

Json-smart vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Json-smart products: 1 record(s), with severity, exploitation and fixes.

Json-smart 1

Exploited only (KEV) →

CVE-2026-113602 Medium · 5.3 CWE-147 Oct 20, 2026
json-smart through 2.6.0 Strict-Mode Validation Bypass via 0x1A Character
json-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to evade strict-mode trailing-data checks by inserting a literal 0x1A character. Attackers can append 0x1A and malformed content to pass JSONValue.parseStrict or isValidJsonStrict validation, creating parser differentials with downstream parsers like Jackson or Gson.