Yajl-Ruby Project Yajl-Ruby
2 CVEs affecting Yajl-Ruby Project Yajl-Ruby. Latest disclosed: 2022-04-05. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-16516 | High | 7.5 | 2017-11-03 | In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a SIGABRT in the yajl_… |
CVE-2022-24795 | Medium | 5.9 | 2022-04-05 | yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer overflow which leads t… |