Skip to content
OpenAdvisories
Unscored DLA-215-1 1 CVE

libjson-ruby - security update

Published Apr 30, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 libjson-ruby 1.1.9-1+deb6u1

Vulnerabilities 1

  • High —
    CVE-2013-0269 Public exploit EPSS 14%

    JSON gem has Improper Input Validation vulnerability

    The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creatio…

    json ruby-json Debian RubyGems