TI-2026-39675 CVE-2026-54903 · GHSA-475m-ph3x-64gp
Oj: Integer Overflow in Oj.load 2GB String Handling
Priority HIGH 67
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
Vulnerabilities
11 records
TI-2026-39674 CVE-2026-54902 · GHSA-m578-w5vf-rfcm
Oj: Use-After-Free in Oj::Parser SAJ Long Key Callback
Priority MEDIUM 61
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
TI-2026-39673 CVE-2026-54901 · GHSA-vwm4-62gf-x745
Oj: Use-After-Free in Oj::Parser array_class/hash_class GC Marking
Priority MEDIUM 61
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
TI-2026-39672 CVE-2026-54900 · GHSA-9cv6-qcjw-4grx
Oj: Negative-Size memcpy in Oj::Parser create_id Attribute Handling
Priority HIGH 69
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
TI-2026-39670 CVE-2026-54898 · GHSA-q2gm-54r6-8fwm
Oj: Use-After-Free in Oj::Parser SAJ Callback via Input Mutation
Priority MEDIUM 44
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
TI-2026-39669 CVE-2026-54897 · GHSA-9ppp-w3g4-fh4q
Oj : Use-After-Free in Oj::Doc Iterators via Reentrant Close
Priority MEDIUM 44
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
TI-2026-39668 CVE-2026-54896 · GHSA-35w3-pjm6-wj95
Oj: Heap Buffer Overflow in Oj.dump Exception Serialization via Large Indent
Priority MEDIUM 44
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
TI-2026-39426 CVE-2026-54592 · GHSA-3m6q-jj5j-38c9
Oj: Stack Buffer Overflow in Oj::Doc#each_child via Deeply Nested Input
Priority HIGH 72
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
TI-2026-39348 CVE-2026-54502 · GHSA-3v45-f3vh-wg7m
Oj: Stack Buffer Overflow in Oj.dump via Large Indent
Priority HIGH 69
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
TI-2026-39346 CVE-2026-54500 · GHSA-fm7p-mprw-wjm9
Oj: intern.c form_attr has an uninitialized stack read
Priority LOW 29
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.
TI-2026-39671 CVE-2026-54899 · GHSA-2cw7-v8ff-p88r
Oj: Use-After-Free in Oj::Parser Symbol Key Cache Toggle
Priority MEDIUM 61
Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem.