Skip to content
Threat Feed
Subscribe

Product

Oj Gem

1 brief RSS
high advisory

Heap Buffer Overflow in Oj.dump Exception Serialization via Large Indent (CVE-2026-54896)

The `Oj.dump` function in the Ruby `oj` gem, when operating in object mode, is vulnerable to a heap buffer overflow (CVE-2026-54896) when serializing `Exception` objects with an excessively large `:indent` value, leading to memory corruption and potential denial of service or remote code execution.

oj gem ruby vulnerability heap-overflow
2r 2t