CVE-2026-54696 (json): JSON generator heap buffer overflow when streaming to an IO
21-Jul-2026 1
Originally appeared on RubySec.Ruby JSON is a JSON implementation for Ruby. Versions 2.9.0 through 2.19.8 are vulnerable to heap buffer overflow when the JSON generator is provided with an oversized streamed object. When streaming to an IO JSON.dump(obj, io) and JSON::State#ge...
CVE-2026-54696 (json): JSON generator heap buffer overflow when streaming to an IO #ruby #rubydeveloper #rubyonrails #ruby #rubyonrails #programming #webdev #cve-2026-54696 #(json): https://rubyonrails.ba/link/cve-2026-54696-json-json-generator-heap-buffer-overflow-when-streaming-to-an-io
