Malicious code in dwpdf1248841 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in dlxprobe22 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chmid7500x528543 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7563 Malicious code in chatoaifetch177855329769 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chatoaifetch177855308016 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chatoaifetch177855303836 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7554 Malicious code in c00_arcguide (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in br3e6a6270eb (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiwsqvuxobcb (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiwkeklykhwg (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiuydcysvgvt (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7479 Malicious code in aicalllngxwwh (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aicalojdhdxoa (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-54502

Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, Oj.dump is vulnerable to a stack-based buffer overflow when a large :indent value is provided by the developer. fillindent in dump.h calls memsetindentstr, ' ', sizetopts-indent without...

CVE-2026-54500

A flaw was found in Oj Optimized JSON, a Ruby gem. When parsing a specially crafted JSON object with a key 254 bytes or longer using Oj.load in :object mode, an attacker can trigger a read of uninitialized stack memory. This vulnerability, an out-of-bounds read CWE-125, can lead to information...

CVE-2026-54901

Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, Oj::Parser in usual mode does not mark arrayclass and hashclass references during garbage collection, leading to Use-After-Free. If GC runs after the class is assigned but before a parse,...

CVE-2026-54900

A flaw was found in Oj, a Ruby gem for JSON parsing. When processing a specially crafted JSON object key of a specific length 65,535 bytes in usual mode with createid enabled, an integer truncation vulnerability occurs. This leads to a negative size being passed to the memcpy function, causing he...

CVE-2026-54899

A flaw was found in Oj Optimized JSON, a Ruby gem for parsing JSON. When a Oj::Parser instance is reused and its symbolkeys setting is toggled from true to false, a heap use-after-free vulnerability occurs. This happens because the internal key cache is freed but its pointer is not cleared,...

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: tcp: fix potential race in tcpv6synrecvsock CVE-2026-43198 kernel: netfilter: nfnetlinkcthelper: fix OOB read in...

RHEL 9 : kernel (RHSA-2026:36018)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:36018 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: fs/smb/client: fix...