From 2c1baee70806b49df1b52cc96ba4650ec2d8f369 Mon Sep 17 00:00:00 2001
From: Chad Wilson <29788154+chadlwilson@users.noreply.github.com>
Date: Mon, 19 Oct 2026 00:42:11 +0800
Subject: [PATCH] fix(reports): correct JSON encoding of packageID identifier

Should be encoded for consistency with others in the same report, even though they are probably all safe for JSON.

Signed-off-by: Chad Wilson <29788154+chadlwilson@users.noreply.github.com>
---
 core/src/main/resources/templates/jsonReport.vsl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/src/main/resources/templates/jsonReport.vsl b/core/src/main/resources/templates/jsonReport.vsl
index b0ae983451..312a345954 100644
--- a/core/src/main/resources/templates/jsonReport.vsl
+++ b/core/src/main/resources/templates/jsonReport.vsl
@@ -96,7 +96,7 @@
                         #foreach($id in $related.getSoftwareIdentifiers())
                             #if($foreach.count > 1),#end
                             {
-                                "id": "$id.value"
+                                "id": "$enc.json($id.value)"
                                 #if ($id.url),"url": "$enc.json($id.url)"#end
                                 #if ($id.notes),"notes": "$enc.json($id.notes)"#end
                             }