Security context

Highlights

Out-of-bounds Read: 4 prior fixes. Scrutinize any change in this area.

src/json.hpp: most-fixed (6 issues). Treat as high-risk during review.

6 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Out-of-bounds Read: Deserialization routines for container or binary payloads must enforce vector bounds validation against input offsets to avoid arbitrary out-of-bounds memory reads during object parsing.

Type Confusion: Using permissive helpers like is_number_integer during pointer retrieval allows type confusion between signed and unsigned integers, requiring explicit checking of value_t enumerations instead.

Integer Overflow: Negative integer parsing in binary deserializers (such as CBOR) can trigger integer overflow and silent data corruption if the values exceed standard int64 bounds.