Circular References

The JSON Hash You Trust Is Lying to You

Most developers treat JSON hashing as a solved problem—sort keys, stringify, hash. But circular references reveal a hidden flaw: libraries that handle cycles can silently produce identical hashes for structurally different objects. A Hacker News comment on the new library Kokuin exposes this collision risk, challenging the assumption that deterministic hashing is safe for caching and deduplication.