RubyGems/oj CVE-2026-54502: medium 6.3, EPSS 0.40%

Oj: Stack Buffer Overflow in Oj.dump via Large Indent

Action: Upgrade oj to 3.17.3 or later.

bundle update oj

Affected

Fixed versions

Sources

• osv: GHSA-3v45-f3vh-wg7m
• nvd: CVE-2026-54502
• https://github.com/ohler55/oj/security/advisories/GHSA-3v45-f3vh-wg7m
• https://github.com/ohler55/oj

CVE-2026-54502 · published 2026-06-19T19:35:27Z · modified 2026-09-10T03:50:55.313173823Z · JSON