oj (RubyGems)
Advisories
11
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 3.17.3 or later clears every advisory below that has a fix.
Upgrade commands
bundler
bundle update oj # Gemfile: gem "oj", ">= 3.17.3"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-475m-ph3x-64gp Oj: Integer Overflow in Oj.load 2GB String Handling |
High EPSS 0.41% |
< 3.17.3 | 3.17.3 |
| GHSA-m578-w5vf-rfcm Oj: Use-After-Free in Oj::Parser SAJ Long Key Callback |
High EPSS 0.50% |
< 3.17.3 | 3.17.3 |
| GHSA-vwm4-62gf-x745 Oj: Use-After-Free in Oj::Parser array_class/hash_class GC Marking |
High EPSS 0.41% |
< 3.17.3 | 3.17.3 |
| GHSA-9cv6-qcjw-4grx Oj: Negative-Size memcpy in Oj::Parser create_id Attribute Handling |
High EPSS 0.52% |
< 3.17.3 | 3.17.3 |
| GHSA-q2gm-54r6-8fwm Oj: Use-After-Free in Oj::Parser SAJ Callback via Input Mutation |
High EPSS 0.20% |
< 3.17.3 | 3.17.3 |
| GHSA-9ppp-w3g4-fh4q Oj: Use-After-Free in Oj::Doc Iterators via Reentrant Close |
High EPSS 0.20% |
< 3.17.3 | 3.17.3 |
| GHSA-35w3-pjm6-wj95 Oj: Heap Buffer Overflow in Oj.dump Exception Serialization via Large Indent |
High EPSS 0.20% |
< 3.17.3 | 3.17.3 |
| GHSA-3m6q-jj5j-38c9 Oj: Stack Buffer Overflow in Oj::Doc#each_child via Deeply Nested Input |
High EPSS 0.33% |
< 3.17.3 | 3.17.3 |
| GHSA-fm7p-mprw-wjm9 Oj: intern.c form_attr (uninitialized stack read) |
Medium EPSS 0.20% |
< 3.17.3 | 3.17.3 |
| GHSA-3v45-f3vh-wg7m Oj: Stack Buffer Overflow in Oj.dump via Large Indent |
High EPSS 0.40% |
< 3.17.3 | 3.17.3 |
| GHSA-2cw7-v8ff-p88r Oj: Use-After-Free in Oj::Parser Symbol Key Cache Toggle |
High EPSS 0.41% |
< 3.17.2 | 3.17.2 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor