critical
CVE-2026-33210
ruby/json: Ruby JSON: Denial of Service or Information Disclosure via format string injection
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
GHSA8.3CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
Red Hat9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by GHSA (high), Red Hat (high), AlmaLinux (high), Oracle (high), Rocky Linux (high).
Description
Ruby JSON is a JSON implementation for Ruby. From version 2.14.0 to before versions 2.15.2.1, 2.17.1.2, and 2.19.2, a format string injection vulnerability can lead to denial of service attacks or information disclosure, when the allow_duplicate_key: false parsing option is used to parse user supplied documents. This issue has been patched in versions 2.15.2.1, 2.17.1.2, and 2.19.2.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| alma 10 | ruby4.0, ruby4.0-devel, ruby4.0-doc and 2 more | 4.0.3-34.el10_2 and 2 more |
| alma 9 | ruby:4.0::ruby, ruby:4.0::ruby-bundled-gems, ruby:4.0::ruby-default-gems and 25 more | 4.0.3-32.module_el9.8.0+251+5fdbd96b and 18 more |
| chainguard | cinc-auditor, gitlab-cng-18.9, jruby-10.1 and 15 more | 7.0.107-r1 and 11 more |
| debian 14 | ruby-json | 2.19.2+dfsg-1 |
| minimos | gitlab-cng-18.7, gitlab-cng-18.8, gitlab-cng-18.9 and 7 more | 18.7.6-r1 and 6 more |
| Oracle Linux 9 | ruby, ruby-bundled-gems, ruby-default-gems and 25 more | 4.0.3-32.module+el9.8.0+90929+122d8796 and 18 more |
| rapidfort alma 10 | ruby4.0, ruby4.0-devel, ruby4.0-doc and 2 more | 4.0.3-34.el10_2 and 2 more |
| rapidfort alma 9 | ruby, ruby-default-gems, ruby-devel and 20 more | 0:4.0.3-32.module+el9.8.0+24280+122d8796.aarch64::ruby:4, 4.0.3-32.module_el9.8.0+251+5fdbd96b and 18 more |
| rapidfort debian 12 | ruby-json | 0:2.19.2+dfsg-1 |
| rapidfort debian 13 | ruby-json | 0:2.19.2+dfsg-1 |
| rapidfort fedora 43 | rubygem-json, rubygem-json-doc | 2.13.2-2.fc43 |
| rapidfort Oracle Linux 10 | ruby4.0, ruby4.0-devel, ruby4.0-rubygem-mysql2 and 1 more | 0:4.0.3-35.el10_2 and 2 more |
Show all 221 entries from 20 sources
| Source | Package | Fixed in |
|---|---|---|
| alma 10 | ruby4.0 | 4.0.3-34.el10_2 |
| alma 10 | ruby4.0-devel | 4.0.3-34.el10_2 |
| alma 10 | ruby4.0-doc | 4.0.3-34.el10_2 |
| alma 10 | ruby4.0-rubygem-mysql2 | 0.5.7-34.el10_2 |
| alma 10 | ruby4.0-rubygem-pg | 1.6.3-34.el10_2 |
| alma 9 | ruby:4.0::ruby | 4.0.3-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::ruby-bundled-gems | 4.0.3-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::ruby-default-gems | 4.0.3-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::ruby-devel | 4.0.3-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::ruby-doc | 4.0.3-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::ruby-libs | 4.0.3-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::rubygem-bigdecimal | 4.0.1-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::rubygem-bundler | 4.0.6-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::rubygem-io-console | 0.8.2-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::rubygem-irb | 1.16.0-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::rubygem-json | 2.18.0-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::rubygem-minitest | 6.0.0-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::rubygem-mysql2 | 0.5.7-1.module_el9.8.0+232+50f6dd36 |
| alma 9 | ruby:4.0::rubygem-mysql2-doc | 0.5.7-1.module_el9.8.0+232+50f6dd36 |
| alma 9 | ruby:4.0::rubygem-pg | 1.6.3-1.module_el9.8.0+232+50f6dd36 |
| alma 9 | ruby:4.0::rubygem-pg-doc | 1.6.3-1.module_el9.8.0+232+50f6dd36 |
| alma 9 | ruby:4.0::rubygem-power_assert | 3.0.1-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::rubygem-psych | 5.3.1-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::rubygem-racc | 1.8.1-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::rubygem-rake | 13.3.1-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::rubygem-rbs | 3.10.0-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::rubygem-rdoc | 7.0.3-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::rubygem-rexml | 3.4.4-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::rubygem-rss | 0.3.2-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::rubygem-test-unit | 3.7.5-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::rubygem-typeprof | 0.31.1-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::rubygems | 4.0.6-32.module_el9.8.0+251+5fdbd96b |
| alma 9 | ruby:4.0::rubygems-devel | 4.0.6-32.module_el9.8.0+251+5fdbd96b |
| chainguard | cinc-auditor | 7.0.107-r1 |
| chainguard | gitlab-cng-18.9 | 18.9.2-r1 |
| chainguard | jruby-10.1 | 0 |
| chainguard | logstash-9.2 | 9.2.7-r1 |
| chainguard | logstash-9.3 | 9.3.2-r1 |
| chainguard | ruby-4.0 | 4.0.2-r1 |
| chainguard | ruby3.2-fluentd-kubernetes-daemonset-1.16 | 1.16.11.1.0-r1 |
| chainguard | ruby3.2-fluentd-kubernetes-daemonset-1.19 | 1.19.2.1.1-r2 |
| chainguard | ruby3.2-rails-8.1 | 8.1.3-r0 |
| chainguard | ruby3.3-fluentd-kubernetes-daemonset-1.16 | 1.16.11.1.0-r1 |
| chainguard | ruby3.3-fluentd-kubernetes-daemonset-1.19 | 1.19.2.1.3-r0 |
| chainguard | ruby3.3-rails-8.1 | 8.1.2.1-r0 |
| chainguard | ruby3.4-fluentd-kubernetes-daemonset-1.16 | 1.16.11.1.0-r1 |
| chainguard | ruby3.4-fluentd-kubernetes-daemonset-1.19 | 1.19.2.1.3-r0 |
| chainguard | ruby3.4-rails-8.1 | 8.1.2.1-r0 |
| chainguard | ruby4.0-fluentd-kubernetes-daemonset-1.16 | 1.16.11.1.0-r2 |
| chainguard | ruby4.0-fluentd-kubernetes-daemonset-1.19 | 1.19.2.1.3-r0 |
| chainguard | ruby4.0-rails-8.1 | 8.1.2.1-r0 |
| debian 14 | ruby-json | 2.19.2+dfsg-1 |
| minimos | gitlab-cng-18.7 | 18.7.6-r1 |
| minimos | gitlab-cng-18.8 | 18.8.6-r1 |
| minimos | gitlab-cng-18.9 | 18.9.2-r1 |
| minimos | jruby-10.1 | 10.1.2.0-r0 |
| minimos | logstash-9.2 | 9.2.8-r0 |
| minimos | ruby3.2-json | 2.19.2-r0 |
| minimos | ruby3.4-fluentd-kubernetes-daemonset-1.19 | 1.19.2.1.3-r0 |
| minimos | ruby3.4-json | 2.19.2-r0 |
| minimos | ruby4.0-fluentd-kubernetes-daemonset-1.19 | 1.19.2.1.3-r0 |
| minimos | ruby4.0-json | 2.19.2-r0 |
| Oracle Linux 9 | ruby | 4.0.3-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | ruby-bundled-gems | 4.0.3-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | ruby-default-gems | 4.0.3-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | ruby-devel | 4.0.3-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | ruby-doc | 4.0.3-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | ruby-libs | 4.0.3-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-bigdecimal | 4.0.1-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-bundler | 4.0.6-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-io-console | 0.8.2-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-irb | 1.16.0-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-json | 2.18.0-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-minitest | 6.0.0-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-mysql2 | 0.5.7-1.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-mysql2-doc | 0.5.7-1.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-pg | 1.6.3-1.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-pg-doc | 1.6.3-1.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-power_assert | 3.0.1-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-psych | 5.3.1-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-racc | 1.8.1-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-rake | 13.3.1-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-rbs | 3.10.0-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-rdoc | 7.0.3-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-rexml | 3.4.4-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-rss | 0.3.2-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-test-unit | 3.7.5-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygem-typeprof | 0.31.1-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygems | 4.0.6-32.module+el9.8.0+90929+122d8796 |
| Oracle Linux 9 | rubygems-devel | 4.0.6-32.module+el9.8.0+90929+122d8796 |
| rapidfort alma 10 | ruby4.0 | 4.0.3-34.el10_2 |
| rapidfort alma 10 | ruby4.0-devel | 4.0.3-34.el10_2 |
| rapidfort alma 10 | ruby4.0-doc | 4.0.3-34.el10_2 |
| rapidfort alma 10 | ruby4.0-rubygem-mysql2 | 0.5.7-34.el10_2 |
| rapidfort alma 10 | ruby4.0-rubygem-pg | 1.6.3-34.el10_2 |
| rapidfort alma 9 | ruby | 0:4.0.3-32.module+el9.8.0+24280+122d8796.aarch64::ruby:4, 4.0.3-32.module_el9.8.0+251+5fdbd96b |
| rapidfort alma 9 | ruby-default-gems | 0:4.0.3-32.module+el9.8.0+24280+122d8796.noarch::ruby:4, 4.0.3-32.module_el9.8.0+251+5fdbd96b |
| rapidfort alma 9 | ruby-devel | 0:4.0.3-32.module+el9.8.0+24280+122d8796.aarch64::ruby:4, 4.0.3-32.module_el9.8.0+251+5fdbd96b |
| rapidfort alma 9 | ruby-libs | 0:4.0.3-32.module+el9.8.0+24280+122d8796.aarch64::ruby:4, 4.0.3-32.module_el9.8.0+251+5fdbd96b |
| rapidfort alma 9 | rubygem-bigdecimal | 0:4.0.1-32.module+el9.8.0+24280+122d8796.aarch64::ruby:4, 4.0.1-32.module_el9.8.0+251+5fdbd96b |
| rapidfort alma 9 | rubygem-bundler | 0:4.0.6-32.module+el9.8.0+24280+122d8796.noarch::ruby:4, 4.0.6-32.module_el9.8.0+251+5fdbd96b |
| rapidfort alma 9 | rubygem-io-console | 0:0.8.2-32.module+el9.8.0+24280+122d8796.aarch64::ruby:4 |
| rapidfort alma 9 | rubygem-irb | 0:1.16.0-32.module+el9.8.0+24280+122d8796.noarch::ruby:4 |
| rapidfort alma 9 | rubygem-json | 0:2.18.0-32.module+el9.8.0+24280+122d8796.aarch64::ruby:4 |
| rapidfort alma 9 | rubygem-minitest | 6.0.0-32.module_el9.8.0+251+5fdbd96b |
| rapidfort alma 9 | rubygem-mysql2 | 0:0.5.7-1.module+el9.8.0+24280+122d8796.aarch64::ruby:4 |
| rapidfort alma 9 | rubygem-pg | 0:1.6.3-1.module+el9.8.0+24280+122d8796.aarch64::ruby:4 |
| rapidfort alma 9 | rubygem-power_assert | 0:3.0.1-32.module+el9.8.0+24280+122d8796.noarch::ruby:4 |
| rapidfort alma 9 | rubygem-psych | 0:5.3.1-32.module+el9.8.0+24280+122d8796.aarch64::ruby:4, 5.3.1-32.module_el9.8.0+251+5fdbd96b |
| rapidfort alma 9 | rubygem-rake | 13.3.1-32.module_el9.8.0+251+5fdbd96b |
| rapidfort alma 9 | rubygem-rbs | 0:3.10.0-32.module+el9.8.0+24280+122d8796.aarch64::ruby:4 |
| rapidfort alma 9 | rubygem-rdoc | 7.0.3-32.module_el9.8.0+251+5fdbd96b |
| rapidfort alma 9 | rubygem-rexml | 0:3.4.4-32.module+el9.8.0+24280+122d8796.noarch::ruby:4 |
| rapidfort alma 9 | rubygem-rss | 0:0.3.2-32.module+el9.8.0+24280+122d8796.noarch::ruby:4 |
| rapidfort alma 9 | rubygem-test-unit | 0:3.7.5-32.module+el9.8.0+24280+122d8796.noarch::ruby:4 |
| rapidfort alma 9 | rubygem-typeprof | 0:0.31.1-32.module+el9.8.0+24280+122d8796.noarch::ruby:4 |
| rapidfort alma 9 | rubygems | 0:4.0.6-32.module+el9.8.0+24280+122d8796.noarch::ruby:4, 4.0.6-32.module_el9.8.0+251+5fdbd96b |
| rapidfort alma 9 | rubygems-devel | 0:4.0.6-32.module+el9.8.0+24280+122d8796.noarch::ruby:4, 4.0.6-32.module_el9.8.0+251+5fdbd96b |
| rapidfort debian 12 | ruby-json | 0:2.19.2+dfsg-1 |
| rapidfort debian 13 | ruby-json | 0:2.19.2+dfsg-1 |
| rapidfort fedora 43 | rubygem-json | 2.13.2-2.fc43 |
| rapidfort fedora 43 | rubygem-json-doc | 2.13.2-2.fc43 |
| rapidfort Oracle Linux 10 | ruby4.0 | 0:4.0.3-35.el10_2 |
| rapidfort Oracle Linux 10 | ruby4.0-devel | 0:4.0.3-35.el10_2 |
| rapidfort Oracle Linux 10 | ruby4.0-rubygem-mysql2 | 0:0.5.7-35.el10_2 |
| rapidfort Oracle Linux 10 | ruby4.0-rubygem-pg | 0:1.6.3-35.el10_2 |
| rapidfort Oracle Linux 9 | ruby | 0:4.0.3-32.module+el9.8.0+24280+122d8796.aarch64::ruby:4 |
| rapidfort Oracle Linux 9 | ruby-default-gems | 0:4.0.3-32.module+el9.8.0+24280+122d8796.noarch::ruby:4 |
| rapidfort Oracle Linux 9 | ruby-devel | 0:4.0.3-32.module+el9.8.0+24280+122d8796.aarch64::ruby:4 |
| rapidfort Oracle Linux 9 | ruby-libs | 0:4.0.3-32.module+el9.8.0+24280+122d8796.aarch64::ruby:4 |
| rapidfort Oracle Linux 9 | rubygem-bigdecimal | 0:4.0.1-32.module+el9.8.0+24280+122d8796.aarch64::ruby:4 |
| rapidfort Oracle Linux 9 | rubygem-bundler | 0:4.0.6-32.module+el9.8.0+24280+122d8796.noarch::ruby:4 |
| rapidfort Oracle Linux 9 | rubygem-io-console | 0:0.8.2-32.module+el9.8.0+24280+122d8796.aarch64::ruby:4 |
| rapidfort Oracle Linux 9 | rubygem-irb | 0:1.16.0-32.module+el9.8.0+24280+122d8796.noarch::ruby:4 |
| rapidfort Oracle Linux 9 | rubygem-json | 0:2.18.0-32.module+el9.8.0+24280+122d8796.aarch64::ruby:4 |
| rapidfort Oracle Linux 9 | rubygem-power_assert | 0:3.0.1-32.module+el9.8.0+24280+122d8796.noarch::ruby:4 |
| rapidfort Oracle Linux 9 | rubygem-psych | 0:5.3.1-32.module+el9.8.0+24280+122d8796.aarch64::ruby:4 |
| rapidfort Oracle Linux 9 | rubygem-rbs | 0:3.10.0-32.module+el9.8.0+24280+122d8796.aarch64::ruby:4 |
| rapidfort Oracle Linux 9 | rubygem-rexml | 0:3.4.4-32.module+el9.8.0+24280+122d8796.noarch::ruby:4 |
| rapidfort Oracle Linux 9 | rubygem-rss | 0:0.3.2-32.module+el9.8.0+24280+122d8796.noarch::ruby:4 |
| rapidfort Oracle Linux 9 | rubygem-test-unit | 0:3.7.5-32.module+el9.8.0+24280+122d8796.noarch::ruby:4 |
| rapidfort Oracle Linux 9 | rubygem-typeprof | 0:0.31.1-32.module+el9.8.0+24280+122d8796.noarch::ruby:4 |
| rapidfort Oracle Linux 9 | rubygems | 0:4.0.6-32.module+el9.8.0+24280+122d8796.noarch::ruby:4 |
| rapidfort Oracle Linux 9 | rubygems-devel | 0:4.0.6-32.module+el9.8.0+24280+122d8796.noarch::ruby:4 |
| rapidfort Red Hat 9 | ruby | 0:4.0.3-32.module+el9.8.0+24280+122d8796 |
| rapidfort Red Hat 9 | ruby-default-gems | 0:4.0.3-32.module+el9.8.0+24280+122d8796 |
| rapidfort Red Hat 9 | ruby-devel | 0:4.0.3-32.module+el9.8.0+24280+122d8796 |
| rapidfort Red Hat 9 | ruby-libs | 0:4.0.3-32.module+el9.8.0+24280+122d8796 |
| rapidfort Red Hat 9 | rubygem-bigdecimal | 0:4.0.1-32.module+el9.8.0+24280+122d8796 |
| rapidfort Red Hat 9 | rubygem-bundler | 0:4.0.6-32.module+el9.8.0+24280+122d8796 |
| rapidfort Red Hat 9 | rubygem-io-console | 0:0.8.2-32.module+el9.8.0+24280+122d8796 |
| rapidfort Red Hat 9 | rubygem-irb | 0:1.16.0-32.module+el9.8.0+24280+122d8796 |
| rapidfort Red Hat 9 | rubygem-json | 0:2.18.0-32.module+el9.8.0+24280+122d8796 |
| rapidfort Red Hat 9 | rubygem-mysql2 | 0:0.5.7-1.module+el9.8.0+24280+122d8796 |
| rapidfort Red Hat 9 | rubygem-pg | 0:1.6.3-1.module+el9.8.0+24280+122d8796 |
| rapidfort Red Hat 9 | rubygem-power_assert | 0:3.0.1-32.module+el9.8.0+24280+122d8796 |
| rapidfort Red Hat 9 | rubygem-psych | 0:5.3.1-32.module+el9.8.0+24280+122d8796 |
| rapidfort Red Hat 9 | rubygem-rbs | 0:3.10.0-32.module+el9.8.0+24280+122d8796 |
| rapidfort Red Hat 9 | rubygem-rexml | 0:3.4.4-32.module+el9.8.0+24280+122d8796 |
| rapidfort Red Hat 9 | rubygem-rss | 0:0.3.2-32.module+el9.8.0+24280+122d8796 |
| rapidfort Red Hat 9 | rubygem-test-unit | 0:3.7.5-32.module+el9.8.0+24280+122d8796 |
| rapidfort Red Hat 9 | rubygem-typeprof | 0:0.31.1-32.module+el9.8.0+24280+122d8796 |
| rapidfort Red Hat 9 | rubygems | 0:4.0.6-32.module+el9.8.0+24280+122d8796 |
| rapidfort Red Hat 9 | rubygems-devel | 0:4.0.6-32.module+el9.8.0+24280+122d8796 |
| rapidfort rocky 9 | ruby | 0:4.0.3-32.module+el9.8.0+40196+162dc1c5 |
| rapidfort rocky 9 | ruby-devel | 0:4.0.3-32.module+el9.8.0+40196+162dc1c5 |
| rapidfort rocky 9 | ruby-libs | 0:4.0.3-32.module+el9.8.0+40196+162dc1c5 |
| rapidfort rocky 9 | rubygem-bigdecimal | 0:4.0.1-32.module+el9.8.0+40196+162dc1c5 |
| rapidfort rocky 9 | rubygem-bundler | 0:4.0.6-32.module+el9.8.0+24280+122d8796.noarch::ruby:4 |
| rapidfort rocky 9 | rubygem-io-console | 0:0.8.2-32.module+el9.8.0+40196+162dc1c5 |
| rapidfort rocky 9 | rubygem-json | 0:2.18.0-32.module+el9.8.0+40196+162dc1c5 |
| rapidfort rocky 9 | rubygem-mysql2 | 0:0.5.7-1.module+el9.8.0+40094+ce01217c |
| rapidfort rocky 9 | rubygem-pg | 0:1.6.3-1.module+el9.8.0+40094+ce01217c |
| rapidfort rocky 9 | rubygem-psych | 0:5.3.1-32.module+el9.8.0+40196+162dc1c5 |
| rapidfort rocky 9 | rubygem-rbs | 0:3.10.0-32.module+el9.8.0+40196+162dc1c5 |
| rocky 10 | ruby4.0 | 0.0.0 |
| rocky 10 | ruby4.0-devel | 0.0.0 |
| rocky 10 | ruby4.0-rubygem-mysql2 | 0.0.0 |
| rocky 10 | ruby4.0-rubygem-pg | 0.0.0 |
| rocky 9 | ruby:4.0::ruby | 4.0.3-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::ruby-bundled-gems | 4.0.3-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::ruby-default-gems | 4.0.3-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::ruby-devel | 4.0.3-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::ruby-doc | 4.0.3-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::ruby-libs | 4.0.3-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::rubygem-bigdecimal | 4.0.1-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::rubygem-bundler | 4.0.6-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::rubygem-io-console | 0.8.2-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::rubygem-irb | 1.16.0-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::rubygem-json | 2.18.0-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::rubygem-minitest | 6.0.0-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::rubygem-mysql2 | 0.5.7-1.module+el9.8.0+40094+ce01217c |
| rocky 9 | ruby:4.0::rubygem-mysql2-doc | 0.5.7-1.module+el9.8.0+40094+ce01217c |
| rocky 9 | ruby:4.0::rubygem-pg | 1.6.3-1.module+el9.8.0+40094+ce01217c |
| rocky 9 | ruby:4.0::rubygem-pg-doc | 1.6.3-1.module+el9.8.0+40094+ce01217c |
| rocky 9 | ruby:4.0::rubygem-power_assert | 3.0.1-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::rubygem-psych | 5.3.1-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::rubygem-racc | 1.8.1-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::rubygem-rake | 13.3.1-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::rubygem-rbs | 3.10.0-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::rubygem-rdoc | 7.0.3-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::rubygem-rexml | 3.4.4-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::rubygem-rss | 0.3.2-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::rubygem-test-unit | 3.7.5-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::rubygem-typeprof | 0.31.1-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::rubygems | 4.0.6-32.module+el9.8.0+40196+162dc1c5 |
| rocky 9 | ruby:4.0::rubygems-devel | 4.0.6-32.module+el9.8.0+40196+162dc1c5 |
| rubygems::GitHub Security Advisory RubyGems | json | 2.19.2, 2.17.1.2, 2.15.2.1 |
| rubygems::Ruby Advisory Database | json | ~> 2.15.2.1, ~> 2.17.1.2, >= 2.19.2 |
| wolfi | cinc-auditor | 7.0.107-r1 |
| wolfi | jruby-10.1 | 0 |
| wolfi | logstash-9.3 | 9.3.2-r1 |
| wolfi | ruby-4.0 | 4.0.2-r1 |
| wolfi | ruby3.2-fluentd-kubernetes-daemonset-1.19 | 1.19.2.1.1-r2 |
| wolfi | ruby3.2-rails-8.1 | 8.1.3-r0 |
| wolfi | ruby3.3-fluentd-kubernetes-daemonset-1.19 | 1.19.2.1.3-r0 |
| wolfi | ruby3.3-rails-8.1 | 8.1.2.1-r0 |
| wolfi | ruby3.4-fluentd-kubernetes-daemonset-1.19 | 1.19.2.1.3-r0 |
| wolfi | ruby3.4-rails-8.1 | 8.1.2.1-r0 |
| wolfi | ruby4.0-fluentd-kubernetes-daemonset-1.19 | 1.19.2.1.3-r0 |
| wolfi | ruby4.0-rails-8.1 | 8.1.2.1-r0 |
References
- https://access.redhat.com/errata/RHSA-2026:20596
- https://access.redhat.com/errata/RHSA-2026:20606
- https://access.redhat.com/errata/RHSA-2026:57565
- https://access.redhat.com/security/cve/CVE-2026-33210
- https://bugzilla.redhat.com/2449871
- https://bugzilla.redhat.com/2461369
- https://bugzilla.redhat.com/show_bug.cgi?id=2449871
- https://bugzilla.redhat.com/show_bug.cgi?id=2461369
All 22 references
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33210
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41316
- https://errata.almalinux.org/9/ALSA-2026-20596.html
- https://errata.rockylinux.org/RLSA-2026:20596
- https://github.com/advisories/GHSA-3m6g-2423-7cp3
- https://github.com/ruby/json
- https://github.com/ruby/json/security/advisories/GHSA-3m6g-2423-7cp3
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/json/CVE-2026-33210.yml
- https://linux.oracle.com/cve/CVE-2026-33210.html
- https://linux.oracle.com/errata/ELSA-2026-20606.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-33210
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33210.json
- https://www.cve.org/CVERecord?id=CVE-2026-33210