Xkyer what about other files in vendor
? (not folder names) try for example:
vendor/flarum/core/LICENSE.md
vendor/flarum/core/src/helpers.php
vendor/flarum/core/migrations/install.dump
If it's just the json file and the others are protected, maybe you have something in your global Apache configuration that affects JSON files in a different way.