TRB-052v1.0.0 · json_decoded_key_collision
JSON decoded key collision
JSON decoded key collision identifies different consumers can interpret duplicate, normalized, or trailing input differently.
CWE mapping
CWE-436parser differential
Assurance
The analyzer verified the reported property directly from the supplied input.
Conditional: Operational impact can still depend on where and how this value is used.
Inert example
Displayed as text only. tryb does not execute this example.
{"role":"reader","role":"admin"}Remediation
parse-and-regenerate. A strict parser and serializer can remove presentation ambiguity for supported values.
Verify: Reparse the regenerated value and compare its supported JSON data model with the parsed source.
What to verify next
Compare the finding with the destination system's validation and trust policy.