What’s Vulnerable › Products

ruby json vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your ruby json version is affected

Latest ruby json vulnerabilities

• CVE-2026-71847 — Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams (CVSS 8.7)
• CVE-2026-54696 — Ruby JSON: JSON generator heap buffer overflow when streaming to an IO (CVSS 3.7)
• CVE-2026-33210 — Ruby JSON has a format string injection vulnerability (CVSS 9.1)