ruby-lang json vulnerabilities (CVE)

CVE records published for ruby-lang json, newest first. Follow to get an email when a new one appears.

1 results

8.3High

CVE-2026-33210 7 months ago

Ruby JSON has a format string injection vulnerability

ruby json; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 9; Red Hat Red Hat Hardened Images

Ruby JSON is a JSON implementation for Ruby. From version 2.14.0 to before versions 2.15.2.1, 2.17.1.2, and 2.19.2, a format string injection vulnerability can lead to denial of service attacks or information disclosure, when the allow_duplicate_key: false pa…