{
  "claim_outcome": "confirmed",
  "claim_block_reason": null,
  "repro_result": "confirmed",
  "validated_surface": "library_api",
  "evidence_scope": "production_path",
  "claimed_impact_class": "info_leak",
  "observed_impact_class": "info_leak",
  "exploitability_confidence": "high",
  "attacker_controlled_input": "JSON object key >= 254 bytes (300 'A' chars) supplied to Oj.load in :object mode",
  "trigger_path": "Oj.load(json, mode: :object) -> object.c:oj_set_obj_ivar -> intern.c:oj_attr_intern -> cache.c:cache_intern (bypasses cache, len>=35) -> intern.c:form_attr long-key path: rb_intern3(uninitialized buf, len+1) reads stack memory",
  "end_to_end_target_reached": true,
  "sanitizer_used": false,
  "crash_observed": false,
  "read_write_primitive_observed": false,
  "exploit_chain_demonstrated": false,
  "blocking_mitigation": null,
  "inferred": false
}