Malicious code in hgpathr1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7706 Malicious code in g8405fcjbu (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in g8402gqdyg (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in g8249sspor (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in dwpdf1248841 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in dlxprobe22 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chmid7500x528543 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7563 Malicious code in chatoaifetch177855329769 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chatoaifetch177855308016 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chatoaifetch177855303836 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7554 Malicious code in c00_arcguide (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in br3e6a6270eb (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiwsqvuxobcb (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiwkeklykhwg (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiuydcysvgvt (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aicalojdhdxoa (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7479 Malicious code in aicalllngxwwh (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-54502

Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, Oj.dump is vulnerable to a stack-based buffer overflow when a large :indent value is provided by the developer. fillindent in dump.h calls memsetindentstr, ' ', sizetopts-indent without...

CVE-2026-54500

A flaw was found in Oj Optimized JSON, a Ruby gem. When parsing a specially crafted JSON object with a key 254 bytes or longer using Oj.load in :object mode, an attacker can trigger a read of uninitialized stack memory. This vulnerability, an out-of-bounds read CWE-125, can lead to information...

CVE-2026-54901

Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, Oj::Parser in usual mode does not mark arrayclass and hashclass references during garbage collection, leading to Use-After-Free. If GC runs after the class is assigned but before a parse,...