Malicious code in sprox-c160-4fossil (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8623 Malicious code in sgvtbcatnr (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8612 Malicious code in sgjqdnyybe (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8444 Malicious code in proxyt8be2d980 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8345 Malicious code in oaitgitxrclle (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in oaiprpfnweljs (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8255 Malicious code in oaijgitzxwjqb (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lbcaltestmvxcve (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7879 Malicious code in lamlove2 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chatoaifetch177855308016 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chatoaifetch177855303836 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-54502

Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, Oj.dump is vulnerable to a stack-based buffer overflow when a large :indent value is provided by the developer. fillindent in dump.h calls memsetindentstr, ' ', sizetopts-indent without...

OPENSUSE-SU-2026:11204-1 ruby4.0-rubygem-uri-1.1.1-1.1 on GA media

These are all security issues fixed in the ruby4.0-rubygem-uri-1.1.1-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2026-54897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to 3.17.2, Oj::Doc iterators eachvalue, eachchild, eachleaf were vulnerab...

Linux Distros Unpatched Vulnerability : CVE-2026-54502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, Oj.dump is vulnerable to a stack-based buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-54592

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.3, Oj::Doceachchild, when invoked recursively over a...

Linux Distros Unpatched Vulnerability : CVE-2026-54902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. Prior to version 3.17.2, is vulnerable to Use-After-Free when in SAJ mode. The...

Linux Distros Unpatched Vulnerability : CVE-2026-54903

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, Oj.load is vulnerable to heap corruption when...

Linux Distros Unpatched Vulnerability : CVE-2026-54900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, when in usual mode with createid enabled,...

ruby:3.3 security update

An update is available for module.ruby, module.rubygem-mysql2, module.rubygem-pg, rubygem-mysql2, ruby, rubygem-pg. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE li...