RubyGems/ox CVE-2017-16229: medium 5.5, EPSS 0.97%

Ox gem stack overflow in sax_parse

Action: Upgrade ox to 2.8.2 or later.

bundle update ox

Affected

Fixed versions

Sources

• osv: GHSA-wfwm-chj7-w59r
• https://nvd.nist.gov/vuln/detail/CVE-2017-16229
• https://github.com/ohler55/ox/issues/195
• https://github.com/ohler55/ox
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ox/CVE-2017-16229.yml
• https://rubygems.org/gems/ox/versions/2.8.1

CVE-2017-16229 · published 2018-03-05T18:29:32Z · modified 2024-02-16T08:21:34.646079Z · JSON