Ruby/json/2.10.1

This is a JSON implementation as a Ruby extension in C.

https://rubygems.org/gems/json
Ruby

2 Security Vulnerabilities

Out-of-bounds Read in Ruby JSON Parser

Published date: 2025-03-12T15:35:23Z
CVE: CVE-2025-27788
Links:

Impact

A specially crafted document could cause an out of bound read, most likely resulting in a crash.

Versions 2.10.0 and 2.10.1 are impacted. Older versions are not.

Patches

Version 2.10.2 fixes the problem.

Workarounds

None.

Affected versions: ["2.10.1", "2.10.0"]
Secure versions: [2.10.2, 2.11.0, 2.11.1, 2.11.2, 2.11.3, 2.12.0, 2.12.1, 2.12.2, 2.3.0, 2.3.1, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.7.0, 2.7.1, 2.7.2, 2.7.3, 2.7.3.rc1, 2.7.4, 2.7.4.rc1, 2.7.4.rc2, 2.7.5, 2.7.6, 2.8.0, 2.8.0.alpha1, 2.8.1, 2.8.2, 2.9.0, 2.9.1]
Recommendation: Update to version 2.12.2.

Out-of-bounds Read in Ruby JSON Parser

Published date: 2025-03-12
CVE: 2025-27788
CVSS V3: 7.5
Links:

Impact

A specially crafted document could cause an out of bound read, most likely resulting in a crash.

Versions 2.10.0 and 2.10.1 are impacted. Older versions are not.

Patches

Version 2.10.2 fixes the problem.

Workarounds

None.

Affected versions: ["2.10.1", "2.10.0"]
Secure versions: [2.10.2, 2.11.0, 2.11.1, 2.11.2, 2.11.3, 2.12.0, 2.12.1, 2.12.2, 2.3.0, 2.3.1, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.7.0, 2.7.1, 2.7.2, 2.7.3, 2.7.3.rc1, 2.7.4, 2.7.4.rc1, 2.7.4.rc2, 2.7.5, 2.7.6, 2.8.0, 2.8.0.alpha1, 2.8.1, 2.8.2, 2.9.0, 2.9.1]
Recommendation: Update to version 2.12.2.

104 Other Versions

Version License Security Released
2.12.2 Ruby 2025-05-23 - 15:09 about 1 month
2.12.1 Ruby 2025-05-23 - 09:38 about 1 month
2.12.0 Ruby 2025-05-12 - 12:33 about 2 months
2.11.3 Ruby 2025-04-25 - 06:03 2 months
2.11.2 Ruby 2025-04-24 - 16:36 2 months
2.11.1 Ruby 2025-04-24 - 13:11 2 months
2.11.0 Ruby 2025-04-24 - 08:12 2 months
2.10.2 Ruby 2025-03-12 - 13:08 4 months
2.10.1 Ruby 2 2025-02-10 - 20:24 5 months
2.10.0 Ruby 2 2025-02-10 - 11:04 5 months
2.9.1 Ruby 2024-12-18 - 17:02 7 months
2.9.0 Ruby 2024-12-03 - 08:25 7 months
2.8.2 Ruby 2024-11-14 - 13:57 8 months
2.8.1 Ruby 2024-11-06 - 17:36 8 months
2.8.0 Ruby 2024-11-06 - 16:04 8 months
2.8.0.alpha1 Ruby 2024-11-06 - 15:17 8 months
2.7.6 Ruby 2024-11-04 - 13:20 8 months
2.7.5 Ruby 2024-10-30 - 11:17 8 months
2.7.4 Ruby 2024-10-25 - 10:57 8 months
2.7.4.rc2 Ruby 2024-10-25 - 10:00 8 months
2.7.4.rc1 Ruby 2024-10-25 - 08:44 8 months
2.7.3 Ruby 2024-10-24 - 08:22 8 months
2.7.3.rc1 Ruby 2024-10-23 - 07:41 8 months
2.7.2 Ruby 2024-04-04 - 03:31 about 1 year
2.7.1 Ruby 2023-12-05 - 04:13 over 1 year
2.7.0 Ruby 2023-12-01 - 06:38 over 1 year
2.6.3 Ruby 2022-12-05 - 11:10 over 2 years
2.6.2 Ruby 2022-05-16 - 22:01 about 3 years
2.6.1 Ruby 2021-10-24 - 00:23 over 3 years
2.6.0 Ruby 2021-10-14 - 08:03 over 3 years
2.5.1 Ruby 2020-12-22 - 12:49 over 4 years
2.5.0 Ruby 2020-12-22 - 10:45 over 4 years
2.4.1 Ruby 2020-12-17 - 05:16 over 4 years
2.4.0 Ruby 2020-12-15 - 10:49 over 4 years
2.3.1 Ruby 2020-06-30 - 12:17 about 5 years
2.3.0 Ruby 2019-12-11 - 17:33 over 5 years
2.2.0 Ruby 2 2019-02-21 - 22:28 over 6 years
2.1.0 Ruby 2 2017-04-18 - 09:40 about 8 years
2.0.4 Ruby 2 2017-04-11 - 10:42 about 8 years
2.0.3 Ruby 2 2017-01-12 - 14:21 over 8 years
2.0.2 Ruby 2 2016-07-26 - 11:12 almost 9 years
2.0.1 Ruby 2 2016-07-01 - 15:34 about 9 years
2.0.0 Ruby 2 2016-07-01 - 09:32 about 9 years
1.8.6 Ruby 2 2017-01-13 - 11:12 over 8 years
1.8.5 Ruby 2 2017-01-12 - 11:47 over 8 years
1.8.3 Ruby 2 2015-06-02 - 07:29 about 10 years
1.8.2 Ruby 2 2015-01-09 - 00:58 over 10 years
1.8.1 Ruby 2 2013-10-17 - 12:05 over 11 years
1.8.0 Ruby 2 2013-05-13 - 12:57 about 12 years
1.7.7 Ruby 2 2013-02-11 - 18:12 over 12 years