IonStack Part I: Unsound IonBanana Peel in Ion Compiler, Slipping Through Firefox's SpiderMonkey JIT | Nebula Security

https://nebusec.ai/research/ionstack-part-1-cve-2026-10702/