CVE-2026-42449: Position Dependent Array Index Shift

Aggressive empty element filtering on a position-dependent (sparse) sub-array shifts subsequent indices, corrupting mappings that rely on index position. Remove trailing empty structures carefully instead of indiscriminately filtering intermediate empty arrays.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0TS
greprules fetch cve-2026-42449-position-dependent-array-index-shift --engine opengrep

Description

Aggressive empty element filtering on a position-dependent (sparse) sub-array shifts subsequent indices, corrupting mappings that rely on index position. Remove trailing empty structures carefully instead of indiscriminately filtering intermediate empty arrays.