tocsin

Debian/ruby-json: high 7.5

The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269, b

Action: Upgrade ruby-json to 2.3.0+dfsg-1 or later.

Affected

introducedfixedlast affected
02.3.0+dfsg-1-

Fixed versions

2.3.0+dfsg-1

Sources

published · modified · JSON