VYPR

JSON Gem

by RubyGems

CVEs (1)

  • CVE-2013-0269Feb 13, 2013
    risk 0.01cvss epss 0.14

    The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby…