ruby/json Security Advisories | GitStock

low2026-08-07

Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams

GHSA-9hj4-r449-hfvc · CVE-2026-71847

low2026-07-23

Ruby json: JSON generator heap buffer overflow when streaming to an IO

GHSA-x2f5-4prf-w687 · CVE-2026-54696

high2026-03-19

Ruby JSON has a format string injection vulnerability

GHSA-3m6g-2423-7cp3 · CVE-2026-33210

high2025-03-12

Out-of-bounds Read in Ruby JSON Parser

GHSA-9m3q-rhmv-5q44 · CVE-2025-27788