// Security Advisories

Vulnerabilities I’ve discovered and disclosed, tracked under the BVE-YYYY-NNNN identifier scheme.

BVE-2026-0006 Reserved ReservedHigh 2026-04-22
BVE-2026-0005 Reserved ReservedCritical 2026-04-22
BVE-2026-0004 Reserved ReservedCritical 2026-04-22
BVE-2026-0002 ok_json: heap buffer overread in UTF-8 validation FixedHighionux 2026-04-22
BVE-2026-0003 ok_json: heap buffer overread in true/false/null keyword matching FixedHighionux 2026-04-22
BVE-2026-0001 ok_json: heap buffer overread in \uXXXX escape parsing FixedHighionux 2026-04-22