Search for packages
| purl | pkg:deb/debian/ruby-json@0?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-8qd2-k69j-nfhf | Out-of-bounds Read in Ruby JSON Parser ### Impact A specially crafted document could cause an out of bound read, most likely resulting in a crash. Versions 2.10.0 and 2.10.1 are impacted. Older versions are not. ### Patches Version 2.10.2 fixes the problem. ### Workarounds None. |
CVE-2025-27788
GHSA-9m3q-rhmv-5q44 |
| VCID-xghz-9k48-bqej | Ruby JSON has a format string injection vulnerability ### Impact A format string injection vulnerability than that lead to denial of service attacks or information disclosure, when the `allow_duplicate_key: false` parsing option is used to parse user supplied documents. This option isn't the default, if you didn't opt-in to use it, you are not impacted. ### Patches Patched in `2.19.2`. ### Workarounds The issue can be avoided by not using the `allow_duplicate_key: false` parsing option. |
CVE-2026-33210
GHSA-3m6g-2423-7cp3 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T12:24:13.802658+00:00 | Debian Importer | Fixing | VCID-8qd2-k69j-nfhf | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T09:18:22.324056+00:00 | Debian Importer | Fixing | VCID-xghz-9k48-bqej | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-13T08:29:21.179554+00:00 | Debian Importer | Fixing | VCID-8qd2-k69j-nfhf | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-11T18:13:06.888456+00:00 | Debian Importer | Fixing | VCID-xghz-9k48-bqej | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-03T07:52:16.633986+00:00 | Debian Importer | Fixing | VCID-xghz-9k48-bqej | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-03T07:52:16.589089+00:00 | Debian Importer | Fixing | VCID-8qd2-k69j-nfhf | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |