oj vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-54903Highoj: Oj: Integer Overflow in Oj.load 2GB String Handling CVE-2026-54902Highoj: Oj: Use-After-Free in Oj::Parser SAJ Long Key Callback CVE-2026-54901Highoj: Oj: Use-After-Free in Oj::Parser array_class/hash_class GC Marking CVE-2026-54900Highoj: Oj: Negative-Size memcpy in Oj::Parser create_id Attribute Handling CVE-2026-54898Highoj: Oj: Use-After-Free in Oj::Parser SAJ Callback via Input Mutation CVE-2026-54897Highoj: Oj: Use-After-Free in Oj::Doc Iterators via Reentrant Close CVE-2026-54896Highoj: Oj: Heap Buffer Overflow in Oj.dump Exception Serialization via Large Indent CVE-2026-54592Highoj: Oj: Stack Buffer Overflow in Oj::Doc#each_child via Deeply Nested Input CVE-2026-54500Mediumoj: Oj: intern.c form_attr (uninitialized stack read)CVE-2026-54502Highoj: Oj: Stack Buffer Overflow in Oj.dump via Large Indent CVE-2026-54899Highoj: Oj: Use-After-Free in Oj::Parser Symbol Key Cache Toggle

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo