ruby json vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 20263

Newest CVEs

• CVE-2026-71847

  Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams

  ruby · json

  High8.7
• CVE-2026-54696

  Ruby JSON: JSON generator heap buffer overflow when streaming to an IO

  ruby · json

  Low3.7
• CVE-2026-33210

  Ruby JSON has a format string injection vulnerability

  ruby · json

  High8.3
• CVE-2025-27788

  Ruby JSON Parser has Out-of-bounds Read

  ruby · json

  High7.5