Lucene search
+L

7 matches found

OSV
OSV
added 2026/06/30 11:8 p.m.6 views

CVE-2026-54500 Oj: intern.c form_attr has an uninitialized stack read

Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.3, Oj.load in :object mode reads uninitialized stack memory and, for long keys, reads out of bounds when parsing a JSON object whose key is 254 bytes or longer. The interned bytes can surfac...

5.3CVSS6.1AI score0.00198EPSS
SaveExploits0References3
Rows per page
Query Builder