[KongchangAI]
Unverified50% confidenceFactExact time

Vulnerability fixed in 3.0.1: claims comparing ASTs or bytecode could still pass via the comment canary; subsequently the canary added no-op assignments to change the syntax tree and bytecode, but this was a partial fix, and claims that read only a smaller fragment of the syntax tree could still pass.

1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/15/2026
First Seen
Valid until: 1/13/2027

Sources

Related Entities

Related Claims

Cite This Claim

Stable URI
https://kongchang.com/claim/1033566
API
curl https://kongchang.com/api/v1/knowledge/claims/1033566
MCP
get_claim(id=1033566)