MGASA-2020-0186 Updated ruby-json packages fix security vulnerability

🗓️ 05 May 2020 12:20:37Reported by GoogleType

osv

osv🔗 osv.dev👁 7 Views

Updated ruby-json packages resolve unsafe object creation vulnerability in JSON parsing.

Reporter	Title	Published	Views	Family All 230
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to multiple Vulnerabilities due to Ruby package	20 Jun 202506:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Global Mailbox vulnerable to security bypass due to Apache Zookeeper (CVE-2020-10663)	4 Jan 202306:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affecting IBM Watson Studio in Cloud Pak for Data are addressed	23 Jun 202516:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities with DataStage on Cloud Pak for Data related to Apache hbase-client 2.4.15	18 Mar 202514:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	26 Mar 202503:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affect IBM Cloud Foundry Migration Runtime	13 Oct 202114:44	–	ibm
FreeBSD	rubygem-json -- Unsafe Objection Creation Vulnerability in JSON (Additional fix)	19 Mar 202000:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : ruby (ALAS-2021-1641)	24 May 202100:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ruby (ALASRUBY2.6-2023-007)	27 Sep 202300:00	–	nessus
Tenable Nessus	Amazon Linux AMI : ruby20 (ALAS-2020-1416)	13 Aug 202000:00	–	nessus

Source	Link
advisories	www.advisories.mageia.org/MGASA-2020-0186.html
bugs	www.bugs.mageia.org/show_bug.cgi
ruby-lang	www.ruby-lang.org/en/news/2020/03/19/json-dos-cve-2020-10663/
debian	www.debian.org/lts/security/2020/dla-2190

16 Apr 2026 04:42Current

7.9High risk

Vulners AI Score7.9

CVSS 25

CVSS 3.17.5

EPSS0.05892

ruby-json package security vulnerability object creation json documents cve-2020-10663