Use-After-Free in Ruby Oj gem via Reentrant Close (CVE-2026-5407)

github.com 2026-07-02查看中文 →

Security AdvisoryCVE-2026-5407LowOj

Affected:

oj gem < 3.17.2

Fixed in:

3.17.2

Referenced CVEs: CVE-2026-54897

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Dompdf Chroot Validation Bypass Local File Read 2026-07-29 Lestar HTML Injection/XSS via Unescaped CSRF Cookie in Template Engine 2026-07-29 Dompdf 3.1.6 Advisory: Fixes Chroot Bypass, LFI, and DoS Vulnerabilities 2026-07-29 CanvasService BOLA Vulnerability: Missing Organization Scoping Enables Unauthenticated Data Access and Tampering 2026-07-29 dompdf Stylesheet.php resolve_url Protocol Validation Fix 2026-07-29

Offline Archive

Offline screenshot & PDF are Pro-exclusive