json-smart json-smart

• CVE-2026-113602 Medium 5.3 json-smart through 2.6.0 Strict-Mode Validation Bypass via 0x1A Character 0.4%
• CVE-2023-1370 High 7.5 Stack exhaustion in json-smart leads to denial of service when parsing malformed JSON 1.1%