JS
Product
json
3
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 0Low 1
Watch
Add json to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33210 | 9.1 | Mar 20 | Ruby JSON has a format string injection vulnerability Affected: >= 2.14.0, < 2.15.2.1; >= 2.16.0, < 2.17.1.2; >= 2.18.0, < 2.19.2 |
| CVE-2026-71847 | 8.7 | Aug 7 | Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams Affected: >= 2.20.0, < 2.21.2 |
| CVE-2026-54696 | 3.7 | Jun 30 | Ruby JSON: JSON generator heap buffer overflow when streaming to an IO Affected: >= 2.9.0, < 2.19.9 |
Showing 3