Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

oj — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in oj, with AI-generated Chinese analysis, references, and POCs.

Vendor: ohler55

CVE ID Title CVSS Severity Published
CVE-2026-54903 Oj: Integer Overflow in Oj.load 2GB String Handling CWE-190 - - 2026-06-30
CVE-2026-54902 Oj: Use-After-Free in Oj::Parser SAJ Long Key Callback CWE-416 - - 2026-06-30
CVE-2026-54901 Oj: Use-After-Free in Oj::Parser array_class/hash_class GC Marking CWE-416 - - 2026-06-30
CVE-2026-54900 Oj: Negative-Size memcpy in Oj::Parser create_id Attribute Handling CWE-190 - - 2026-06-30
CVE-2026-54898 Oj: Use-After-Free in Oj::Parser SAJ Callback via Input Mutation CWE-416 - - 2026-06-30
CVE-2026-54897 Oj : Use-After-Free in Oj::Doc Iterators via Reentrant Close CWE-416 - - 2026-06-30
CVE-2026-54896 Oj: Heap Buffer Overflow in Oj.dump Exception Serialization via Large Indent CWE-122 - - 2026-06-30
CVE-2026-54592 Oj: Stack Buffer Overflow in Oj::Doc#each_child via Deeply Nested Input CWE-125 7.5 High 2026-06-30
CVE-2026-54502 Oj: Stack Buffer Overflow in Oj.dump via Large Indent CWE-121 - - 2026-06-30
CVE-2026-54500 Oj: intern.c form_attr has an uninitialized stack read CWE-125 5.3 Medium 2026-06-30
CVE-2026-54899 Oj: Use-After-Free in Oj::Parser Symbol Key Cache Toggle CWE-416 - - 2026-06-30

All 11 known CVE vulnerabilities affecting oj with full Chinese analysis, references, and POCs where available.