CVE-2025-27788
Ruby JSON Parser has Out-of-bounds Read
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Ruby JSON Parser has Out-of-bounds Read
JSON is a JSON implementation for Ruby. Starting in version 2.10.0 and prior to version 2.10.2, a specially crafted document could cause an out of bound read, most likely resulting in a crash. Versions prior to 2.10.0 are not vulnerable. Version 2.10.2 fixes the problem. No known workarounds are available.
Reserved 2025-03-06 | Published 2025-03-12 | Updated 2025-03-12 | Assigner GitHub_Mgithub.com/ruby/json/security/advisories/GHSA-9m3q-rhmv-5q44
github.com/...ommit/c56db31f800d5d508389793e69682f99749dbadf
github.com/ruby/json/releases/tag/v2.10.2
Support options
