VDB

RHSA-2026:57565

RHSA-2026:57565 PUBLISHED CVSS 3.700000047683716 LOW

A flaw was found in Ruby JSON. This vulnerability, a format string injection, allows a remote attacker to cause a denial of service (DoS) or disclose sensitive information. The flaw occurs when processing specially crafted user-supplied documents with the allow_duplicate_key: false parsing option enabled.

Risk Scores

CVSS 3.1
3.700000047683716
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected Products

VendorProductVersions
Red Hatruby4-0-main@aarch64 as a component of Red Hat Hardened Images*
Red Hatruby4-0-main@noarch as a component of Red Hat Hardened Images*
Red Hatruby4-0-main@src as a component of Red Hat Hardened Images*
Red Hatruby4-0-main@x86_64 as a component of Red Hat Hardened Images*

Timeline

  • Aug 20, 2026 CVE Published
  • Aug 28, 2026 CVE Updated
  • Aug 28, 2026 Distribution Patch
  • Aug 28, 2026 Distribution Patch
  • Aug 28, 2026 Security Advisory
  • Aug 28, 2026 Security Advisory
  • Aug 28, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›