CVE-2026-40100: Naive Json Quote Escaping

Manual string replacement for escaping quotes and newlines in JSON payloads is error-prone and can lead to JSON injection or malformed payloads. Use standard JSON serialization (such as JSON.stringify) instead.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0TS
greprules fetch cve-2026-40100-naive-json-quote-escaping --engine opengrep

Description

Manual string replacement for escaping quotes and newlines in JSON payloads is error-prone and can lead to JSON injection or malformed payloads. Use standard JSON serialization (such as JSON.stringify) instead.