CVE-2026-54896

Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, when in object mode, Oj.dump is vulnerable to a heap buffer overflow when serializing Exception objects with a large :indent value. The serializer allocates a buffer sized for the object'...

PYSEC-2026-2292

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Versions 5.10 through 5.11.0 are vulnerable to buffer overflow or infinite loop through large indent handling. ujson.dumps crashes the Python interpreter segmentation fault when the product of the indent...

Azure Linux 3.0 Security Update: indent (CVE-2023-40305)

The version of indent installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-40305 advisory. - GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file...

EUVD-2022-0348

Malicious code in bioql PyPI...

SUSE SLES12 Security Update : indent (SUSE-SU-2024:1134-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1134-1 advisory. - CVE-2024-0911: Fixed heap-based buffer overflow in setbufbreak bsc1219210. Tenable has extracted the preceding description block directly...

GNU indent buffer overflow vulnerability

GNU indent is a utility program of the American GNU community that has existed since the Unix era. It can be reindented into C and C++ code in a user-defined programming style. GNU indent suffers from a buffer overflow vulnerability that stems from a heap-based buffer overflow contained in...

AZL-57656 CVE-2024-0911 affecting package indent 2.2.13-1

A flaw was found in indent, a program for formatting C code. This issue may allow an attacker to trick a user into processing a specially crafted file to trigger a heap-based buffer overflow, causing the application to crash...

Low: indent

Issue Overview: A flaw was found in Indent. This issue may allow a local user to use a specially-crafted file to trigger a heap-based buffer overflow, which can lead to an application crash. CVE-2024-0911 Affected Packages: indent Note: This advisory is applicable to Amazon Linux 2 AL2 Core...

Amazon Linux 2 : indent (ALAS-2023-2358)

The version of indent installed on the remote host is prior to 2.2.11-13. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2358 advisory. GNU indent 2.2.13 has a heap-based buffer overflow in searchbrace in indent.c via a crafted file. CVE-2023-40305 Tenable has...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : Indent vulnerability (USN-6389-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has a package installed that is affected by a vulnerability as referenced in the USN-6389-1 advisory. It was discovered that Indent incorrectly handled parsing certain source files. If a user or automated system were tricked into processing a...