CVE-2026-92935: Javascript Weak Object Type Guard Config Validationcve-2026-92935-javascript-weak-object-type-guard-config-validation
Configuration is validated with only `typeof $OPT === 'object' && $OPT !== null` (or its De Morgan inverse `typeof $OPT !== 'object' || $OPT === null`), so arrays (`[]`), boxed primitives (`new String()`), and exotic instances (`new Date()`, `new Map()`) are accepted as "an explicit config object" even though they carry none of the expected option fields and
