RubyGems/oj CVE-2026-54898: high, EPSS 0.15%
Oj: Use-After-Free in Oj::Parser SAJ Callback via Input Mutation
Action: Upgrade oj to 3.17.3 or later.
bundle update ojAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.17.3 | - |
Fixed versions
| 3.17.3 |
Sources
- osv: GHSA-q2gm-54r6-8fwm
- https://github.com/ohler55/oj/security/advisories/GHSA-q2gm-54r6-8fwm
- https://github.com/ohler55/oj
CVE-2026-54898 · published · modified · JSON