Skip to content
Threat Feed
Subscribe

Vendor

Oj

2 briefs RSS
high advisory

Heap Buffer Overflow in Oj.dump Exception Serialization via Large Indent (CVE-2026-54896)

The `Oj.dump` function in the Ruby `oj` gem, when operating in object mode, is vulnerable to a heap buffer overflow (CVE-2026-54896) when serializing `Exception` objects with an excessively large `:indent` value, leading to memory corruption and potential denial of service or remote code execution.

oj gem ruby vulnerability heap-overflow
2r 2t
high advisory

Oj: Use-After-Free in Oj::Doc Iterators via Reentrant Close

A heap use-after-free vulnerability (CVE-2026-54897) exists in `Oj::Doc` iterators (`each_value`, `each_child`, `each_leaf`) in the `oj` Ruby gem, allowing an attacker to cause application crashes or unpredictable behavior when a Ruby block yielded during iteration reentrantly calls `doc.close` or `d.close`.

oj gem ruby use-after-free library-vulnerability dos
2r 1t