MAL-2026-7479 Malicious code in aicalllngxwwh (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in agfosslic24 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7475 Malicious code in agfossgrant23 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7473 Malicious code in agentoaitestabc123 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7474 Malicious code in agfosscab20 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in abcfoobar1778550632348198 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7472 Malicious code in abcfoobar1778550632348198 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7471 Malicious code in abcfoobar1778550629075869 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in abcfoobar1778550625683711 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7470 Malicious code in abcfoobar1778550625683711 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7469 Malicious code in a0a_arcgraph (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7468 Malicious code in a00_arcguide (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)

Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ex. Linux allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Jav...

PYSEC-2026-1428 Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)

Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ex. Linux allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Jav...

CVE-2026-54502

Oj Optimized JSON is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, Oj.dump is vulnerable to a stack-based buffer overflow when a large :indent value is provided by the developer. fillindent in dump.h calls memsetindentstr, ' ', sizetopts-indent without...

CVE-2026-54500

A flaw was found in Oj Optimized JSON, a Ruby gem. When parsing a specially crafted JSON object with a key 254 bytes or longer using Oj.load in :object mode, an attacker can trigger a read of uninitialized stack memory. This vulnerability, an out-of-bounds read CWE-125, can lead to information...

CVE-2026-54898

A flaw was found in Oj, a Ruby library designed for efficient JSON JavaScript Object Notation parsing. This vulnerability, a heap use-after-free, occurs when a specific function, called a callback, modifies the input JSON string during the parsing process. This action can lead to the program...

CVE-2026-54592

A flaw was found in Oj, a Ruby gem for JSON parsing. A remote attacker can exploit this vulnerability by providing a deeply nested JSON document. This can lead to a stack buffer overflow in the Oj::Doceachchild function, causing the process to abort and resulting in a denial of service DoS for th...

CVE-2026-54903

A flaw was found in Oj, an Optimized JSON JavaScript Object Notation parser for Ruby. This vulnerability allows a remote attacker to cause heap corruption and a denial of service DoS by providing a JSON string larger than 2 gigabytes GB. An integer overflow occurs when processing the string lengt...

CVE-2026-54897

A flaw was found in Oj Optimized JSON, a Ruby gem for parsing JSON. This vulnerability, categorized as a heap use-after-free CWE-416, occurs in the Oj::Doc iterators, specifically eachvalue, eachchild, and eachleaf. An attacker could exploit this when a Ruby code block, executed during iteration,...