Photon OS 5.0: Rubygem PHSA-2026-5.0-0917

An update of the rubygem package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0917. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-54899

A flaw was found in Oj Optimized JSON, a Ruby gem for parsing JSON. When a Oj::Parser instance is reused and its symbolkeys setting is toggled from true to false, a heap use-after-free vulnerability occurs. This happens because the internal key cache is freed but its pointer is not cleared,...

CVE-2026-54899

creationtimestamp| type| source ---|---|--- 2026-07-01 02:25:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpkhnr7sqg26 2026-07-02 01:13:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmu3d3qlr22...

CVE-2026-54899 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset...