Skip to content
fr Sign in
7.5 High

CVE-2025-27788 JSON is a JSON implementation for Ruby

Description

JSON is a JSON implementation for Ruby. Starting in version 2.10.0 and prior to version 2.10.2, a specially crafted document could cause an out of bound read, most likely resulting in a crash. Versions prior to 2.10.0 are not vulnerable. Version 2.10.2 fixes the problem. No known workarounds are available.

Affected products and versions

Product Affected versions Fixed in
json 2.10 2.10.0 → < 2.10.2 2.10.2

References

Timeline

  1. Published
  2. Last modified

Other CVEs of json

The 4 CVEs of json →
CVE-2026-71847 Ruby JSON is a JSON implementation for Ruby 8.7 High CVE-2026-54696 Ruby JSON is a JSON implementation for Ruby 3.7 Low CVE-2026-33210 Ruby JSON is a JSON implementation for Ruby 8.3 High
Track this CVE