Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-27531 EUVD-2023-1812GHSA-h2wm-p2vg-6pw4

Kredis JSON Possible Deserialization of Untrusted Data Vulnerability

Published Jan 9, 2025 · Updated Jan 9, 2025 · Assigned by hackerone

Vendor: rails Product: Kredis JSON Package: kredis Ecosystem: RubyGems

Description

There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code

Affected products

VendorProductAffectedFixed
Rails Kredis JSON 1.3.0.1 – < 1.3.0.1 1.3.0.1

Affected packages

EcosystemPackageAffectedFixedRecord
RubyGems kredis < 1.3.0.1 1.3.0.1 GHSA-h2wm-p2vg-6pw4

Advisories 1

References