{
  "entrypoint_kind": "library_api",
  "entrypoint_detail": "Multi-mode sweep: Oj.load {:object,:compat,:rails,:strict,:null,:wab,:custom} + Oj::Parser.new(:usual) with 300-byte key, tested on vulnerable 495cc38 and fixed bbde91a",
  "service_started": false,
  "healthcheck_passed": false,
  "target_path_reached": true,
  "runtime_stack": [
    "ruby",
    "oj-c-extension"
  ],
  "bypass_found": 0,
  "alt_trigger_found": 0,
  "verdict": "no_variant_found",
  "notes": "No bypass or alternate trigger found. The fix (intern.c buf->b) fully closes the only path (Oj.load :object mode -> object.c -> oj_attr_intern -> intern.c form_attr). All other modes either do not reach form_attr or use usual.c's already-fixed copy (ec368db, pre-v3.17.2). The newer Oj::Parser API uses usual.c form_attr (already fixed) and its :object mode is unimplemented (// TBD)."
}