Ruby/json/2.10.1
This is a JSON implementation as a Ruby extension in C.
https://rubygems.org/gems/json
Ruby
2 Security Vulnerabilities
Out-of-bounds Read in Ruby JSON Parser
Published date: 2025-03-12T15:35:23Z
CVE: CVE-2025-27788
Links:
- https://github.com/ruby/json/security/advisories/GHSA-9m3q-rhmv-5q44
- https://nvd.nist.gov/vuln/detail/CVE-2025-27788
- https://github.com/ruby/json/commit/c56db31f800d5d508389793e69682f99749dbadf
- https://github.com/ruby/json/releases/tag/v2.10.2
- https://github.com/advisories/GHSA-9m3q-rhmv-5q44
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/json/CVE-2025-27788.yml
Impact
A specially crafted document could cause an out of bound read, most likely resulting in a crash.
Versions 2.10.0 and 2.10.1 are impacted. Older versions are not.
Patches
Version 2.10.2 fixes the problem.
Workarounds
None.
Affected versions:
["2.10.1", "2.10.0"]
Secure versions:
[2.10.2, 2.11.0, 2.11.1, 2.11.2, 2.11.3, 2.12.0, 2.12.1, 2.12.2, 2.3.0, 2.3.1, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.7.0, 2.7.1, 2.7.2, 2.7.3, 2.7.3.rc1, 2.7.4, 2.7.4.rc1, 2.7.4.rc2, 2.7.5, 2.7.6, 2.8.0, 2.8.0.alpha1, 2.8.1, 2.8.2, 2.9.0, 2.9.1]
Recommendation:
Update to version 2.12.2.
Out-of-bounds Read in Ruby JSON Parser
Published date: 2025-03-12
CVE: 2025-27788
CVSS V3: 7.5
Impact
A specially crafted document could cause an out of bound read, most likely resulting in a crash.
Versions 2.10.0 and 2.10.1 are impacted. Older versions are not.
Patches
Version 2.10.2 fixes the problem.
Workarounds
None.
Affected versions:
["2.10.1", "2.10.0"]
Secure versions:
[2.10.2, 2.11.0, 2.11.1, 2.11.2, 2.11.3, 2.12.0, 2.12.1, 2.12.2, 2.3.0, 2.3.1, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.7.0, 2.7.1, 2.7.2, 2.7.3, 2.7.3.rc1, 2.7.4, 2.7.4.rc1, 2.7.4.rc2, 2.7.5, 2.7.6, 2.8.0, 2.8.0.alpha1, 2.8.1, 2.8.2, 2.9.0, 2.9.1]
Recommendation:
Update to version 2.12.2.
104 Other Versions
| Version | License | Security | Released | |
|---|---|---|---|---|
| 1.7.6 | UNKNOWN | 4 | 2012-12-31 - 00:41 | over 12 years |
| 1.7.5 | UNKNOWN | 4 | 2012-08-17 - 19:00 | almost 13 years |
| 1.7.4 | UNKNOWN | 4 | 2012-07-26 - 07:47 | almost 13 years |
| 1.7.3 | UNKNOWN | 4 | 2012-05-11 - 22:27 | about 13 years |
| 1.7.2 | UNKNOWN | 4 | 2012-05-11 - 19:04 | about 13 years |
| 1.7.1 | UNKNOWN | 4 | 2012-05-07 - 11:29 | about 13 years |
| 1.7.0 | UNKNOWN | 4 | 2012-04-28 - 01:29 | about 13 years |
| 1.6.8 | UNKNOWN | 2 | 2013-02-11 - 18:05 | over 12 years |
| 1.6.7 | UNKNOWN | 3 | 2012-04-28 - 01:17 | about 13 years |
| 1.6.6 | UNKNOWN | 3 | 2012-03-26 - 15:11 | over 13 years |
| 1.6.5 | UNKNOWN | 3 | 2012-01-15 - 14:50 | over 13 years |
| 1.6.4 | UNKNOWN | 3 | 2011-12-24 - 14:17 | over 13 years |
| 1.6.3 | UNKNOWN | 3 | 2011-12-01 - 08:18 | over 13 years |
| 1.6.2 | UNKNOWN | 3 | 2011-11-28 - 16:05 | over 13 years |
| 1.6.1 | UNKNOWN | 3 | 2011-09-18 - 13:26 | almost 14 years |
| 1.6.0.1 | UNKNOWN | 3 | 2011-09-13 - 20:19 | almost 14 years |
| 1.6.0 | UNKNOWN | 3 | 2011-09-12 - 23:26 | almost 14 years |
| 1.5.5 | UNKNOWN | 2 | 2013-02-11 - 18:05 | over 12 years |
| 1.5.4 | UNKNOWN | 3 | 2011-08-31 - 23:26 | almost 14 years |
| 1.5.3 | UNKNOWN | 3 | 2011-06-20 - 12:36 | about 14 years |
| 1.5.2 | UNKNOWN | 3 | 2011-06-14 - 22:39 | about 14 years |
| 1.5.1 | UNKNOWN | 3 | 2011-01-26 - 01:20 | over 14 years |
| 1.5.0 | UNKNOWN | 3 | 2011-01-23 - 06:02 | over 14 years |
| 1.4.6 | UNKNOWN | 4 | 2010-08-12 - 23:16 | almost 15 years |
| 1.4.5 | UNKNOWN | 4 | 2010-08-07 - 16:05 | almost 15 years |
| 1.4.4 | UNKNOWN | 4 | 2010-08-06 - 20:03 | almost 15 years |
| 1.4.3 | UNKNOWN | 4 | 2010-08-03 - 22:54 | almost 15 years |
| 1.4.2 | UNKNOWN | 4 | 2010-04-27 - 22:42 | about 15 years |
| 1.4.1 | UNKNOWN | 4 | 2010-04-25 - 13:47 | about 15 years |
| 1.4.0 | UNKNOWN | 4 | 2010-04-23 - 21:31 | about 15 years |
| 1.2.4 | UNKNOWN | 4 | 2010-04-08 - 07:52 | about 15 years |
| 1.2.3 | UNKNOWN | 4 | 2010-03-11 - 09:12 | over 15 years |
| 1.2.2 | UNKNOWN | 4 | 2010-02-28 - 17:17 | over 15 years |
| 1.2.1 | UNKNOWN | 4 | 2010-02-26 - 21:29 | over 15 years |
| 1.2.0 | UNKNOWN | 4 | 2009-11-08 - 04:16 | over 15 years |
| 1.1.9 | UNKNOWN | 4 | 2009-09-24 - 22:13 | almost 16 years |
| 1.1.8 | UNKNOWN | 4 | 2009-09-24 - 22:13 | almost 16 years |
| 1.1.7 | UNKNOWN | 4 | 2009-08-05 - 00:38 | almost 16 years |
| 1.1.6 | UNKNOWN | 4 | 2009-07-25 - 18:11 | almost 16 years |
| 1.1.5 | UNKNOWN | 4 | 2009-07-25 - 18:11 | almost 16 years |
| 1.1.4 | UNKNOWN | 4 | 2009-07-25 - 18:11 | almost 16 years |
| 1.1.3 | UNKNOWN | 4 | 2009-07-25 - 18:11 | almost 16 years |
| 1.1.2 | UNKNOWN | 4 | 2009-07-25 - 18:11 | almost 16 years |
| 1.1.1 | UNKNOWN | 4 | 2009-09-24 - 22:13 | almost 16 years |
| 1.1.0 | UNKNOWN | 4 | 2009-09-24 - 22:13 | almost 16 years |
| 1.0.4 | UNKNOWN | 5 | 2009-09-24 - 22:13 | almost 16 years |
| 1.0.3 | UNKNOWN | 5 | 2009-09-24 - 22:13 | almost 16 years |
| 1.0.2 | UNKNOWN | 5 | 2009-07-25 - 18:11 | almost 16 years |
| 1.0.1 | UNKNOWN | 5 | 2009-07-25 - 18:11 | almost 16 years |
| 1.0.0 | UNKNOWN | 5 | 2009-07-25 - 18:11 | almost 16 years |