{"action":"Upgrade oj to 3.17.3 or later.","affected":[{"fixed":"3.17.3","introduced":"0"}],"component":"oj","cve_ids":["CVE-2026-54592"],"ecosystem":"RubyGems","epss":0.00328,"exploited":false,"fixed_versions":["3.17.3"],"ghsa_id":"GHSA-3m6q-jj5j-38c9","id":"tcs_01M5KEGBF8APQD96ESQRDF8ZFN","modified_at":"2026-09-10T03:50:55.528576355Z","published_at":"2026-06-19T19:36:28Z","references":["https://osv.dev/vulnerability/GHSA-3m6q-jj5j-38c9","https://github.com/ohler55/oj/security/advisories/GHSA-3m6q-jj5j-38c9","https://github.com/ohler55/oj"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-3m6q-jj5j-38c9","url":"https://osv.dev/vulnerability/GHSA-3m6q-jj5j-38c9"}],"summary":"Oj: Stack Buffer Overflow in Oj::Doc#each_child via Deeply Nested Input"}