=== Additional Variant Tests for GHSA-v7m3-fpcr-h7m2 === Testing serializer at: /root/.pruva/runs/ghsa-v7m3-fpcr-h7m2_20260220-144406/json-serializer-fixed [TEST A] Object reference (@N) bypass attempt [INFO] Deserialized array with references [INFO] Got 2 items [TEST B] Deeply nested disallowed class [PASS] Deeply nested disallowed class blocked [TEST C] Array containing disallowed class elements [PASS] Array disallowed class blocked [TEST D] DateTime classes (special handling) bypass [INFO] DateTime blocked by allowlist [TEST E] Closure deserialization (if serializer available) [SKIP] SuperClosure not available [TEST F] Special characters in class names [INFO] Exception: Invalid JSON to unserialize. [TEST G] Custom serializer with malicious return [INFO] Custom serializer can return any class (by design) === Summary === All edge case tests completed - no bypasses found.