Debian/ruby-json: unknown
Ruby JSON is a JSON implementation for Ruby. From 2.20.0 until 2.21.2, Ruby's JSON native C extension clears the consumed JSON::ResumableParser input buffer but leaves state.start, state.cursor, and s
Action: Upgrade ruby-json to 2.21.2+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.21.2+dfsg-1 | - |
Fixed versions
| 2.21.2+dfsg-1 |
Sources
- osv: DEBIAN-CVE-2026-71847#Debian:14/ruby-json
- https://security-tracker.debian.org/tracker/CVE-2026-71847
published · modified · JSON