JS
Product
json
by ruby · last CVE Aug 7, 2026
4
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 0Low 1
Watch

Add json to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-71847
8.7
0%
Aug 7
Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams
Affected: >= 2.20.0, < 2.21.2
CVE-2025-27788
7.5
1%
Mar 12
Ruby JSON Parser has Out-of-bounds Read
Affected: >= 2.10.0, < 2.10.2
Showing 2