Unicode includes a bunch of 5+ hex digit characters now; most notably emoji, but I think there might be some real human language characters in there too.
Puppet's \u escape sequences don't accommodate these. The 5-digit versions get truncated, and the alternate 2x4-digit forms result in an error.
The implementation allows using the escape
where n is 1 or more hex digits.
|Probability||Medium (anyone using 5+ byte unicode characters)|
|Impact||Medium (broken Unicode support breaks puppet)|