{"action":"Upgrade ruby to 2.6.6-r0 or later.","affected":[{"fixed":"2.6.6-r0","introduced":"0"}],"component":"ruby","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.24","exploited":false,"fixed_versions":["2.6.6-r0"],"id":"tcs_01M5NC13MJSEC3D4CAX2AB1830","modified_at":"2026-09-11T10:17:51.359596123Z","published_at":"2020-04-28T21:15:11.667Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2020-10663","https://security.alpinelinux.org/vuln/CVE-2020-10663"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2020-10663#Alpine:v3.24/ruby","url":"https://osv.dev/vulnerability/ALPINE-CVE-2020-10663"}],"summary":"The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269, b"}