CVE-2026-54901
1 advisory.
RubyGems/oj CVE-2026-54901: high
Oj: Use-After-Free in Oj::Parser array_class/hash_class GC Marking
Action: Upgrade oj to 3.17.3 or later.
bundle update ojAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.17.3 | - |
Fixed versions
| 3.17.3 |
Sources
- osv: GHSA-vwm4-62gf-x745
- https://github.com/ohler55/oj/security/advisories/GHSA-vwm4-62gf-x745
- https://github.com/ohler55/oj
CVE-2026-54901 · published · modified · JSON