CVE-2026-54900
1 advisory.
RubyGems/oj CVE-2026-54900: high, EPSS 0.45%
Oj: Negative-Size memcpy in Oj::Parser create_id Attribute Handling
Action: Upgrade oj to 3.17.3 or later.
bundle update ojAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.17.3 | - |
Fixed versions
| 3.17.3 |
Sources
- osv: GHSA-9cv6-qcjw-4grx
- https://github.com/ohler55/oj/security/advisories/GHSA-9cv6-qcjw-4grx
- https://github.com/ohler55/oj
CVE-2026-54900 · published · modified · JSON