Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority HIGH 66

yajl-ruby is a C binding to the YAJL JSON parsing and generation library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03444 Published 2022-04-05 Partial fix · 1.4.3 CWE-122
Priority LOW 39

In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a SIGABRT in the yajl_string_decode function in yajl_encode.c.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03767 Published 2017-11-03 Partial fix · 1.3.1 CWE-134