Lucene search
+L

3 matches found

OSV
OSV
added yesterday5 views

GHSA-9HJ4-R449-HFVC Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams

Summary Ruby's JSON native C extension clears the consumed JSON::ResumableParser input buffer but leaves state.start, state.cursor, and state.end pointing into released storage. When partialvalue reconstructs an incomplete object containing duplicate keys, the duplicate-key warning path calls...

8.7CVSS6.3AI score
SaveExploits0References2
Rows per page
Query Builder