JS
Product
json
by ruby · last CVE Aug 7, 2026
3
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 0Low 1
Watch

Add json to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-71847
8.7
0%
Aug 7
Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams
Affected: >= 2.20.0, < 2.21.2
Showing 1