TI-2026-39426 CVE-2026-54592 · GHSA-3m6q-jj5j-38c9
Oj: Stack Buffer Overflow in Oj::Doc#each_child via Deeply Nested Input
Priority HIGH 72
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
ohler55
Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
ohler55 records in CISA KEVNo ohler55 vulnerabilities are listed in CISA KEV.
Records
11 records
TI-2026-39672 CVE-2026-54900 · GHSA-9cv6-qcjw-4grx
Oj: Negative-Size memcpy in Oj::Parser create_id Attribute Handling
Priority HIGH 69
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
TI-2026-39348 CVE-2026-54502 · GHSA-3v45-f3vh-wg7m
Oj: Stack Buffer Overflow in Oj.dump via Large Indent
Priority HIGH 69
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
TI-2026-39675 CVE-2026-54903 · GHSA-475m-ph3x-64gp
Oj: Integer Overflow in Oj.load 2GB String Handling
Priority HIGH 67
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
TI-2026-39674 CVE-2026-54902 · GHSA-m578-w5vf-rfcm
Oj: Use-After-Free in Oj::Parser SAJ Long Key Callback
Priority MEDIUM 61
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
TI-2026-39673 CVE-2026-54901 · GHSA-vwm4-62gf-x745
Oj: Use-After-Free in Oj::Parser array_class/hash_class GC Marking
Priority MEDIUM 61
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
TI-2026-39671 CVE-2026-54899 · GHSA-2cw7-v8ff-p88r
Oj: Use-After-Free in Oj::Parser Symbol Key Cache Toggle
Priority MEDIUM 61
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
TI-2026-39670 CVE-2026-54898 · GHSA-q2gm-54r6-8fwm
Oj: Use-After-Free in Oj::Parser SAJ Callback via Input Mutation
Priority MEDIUM 44
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
TI-2026-39669 CVE-2026-54897 · GHSA-9ppp-w3g4-fh4q
Oj : Use-After-Free in Oj::Doc Iterators via Reentrant Close
Priority MEDIUM 44
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
TI-2026-39668 CVE-2026-54896 · GHSA-35w3-pjm6-wj95
Oj: Heap Buffer Overflow in Oj.dump Exception Serialization via Large Indent
Priority MEDIUM 44
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
TI-2026-39346 CVE-2026-54500 · GHSA-fm7p-mprw-wjm9
Oj: intern.c form_attr has an uninitialized stack read
Priority LOW 29
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.