https://vulnerability.circl.lu/sightings/feed 2026-08-09T19:52:55.701377+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/dd656878-d76a-4b83-8dbc-ca30dd359c60/export 2026-08-09T19:52:55.723097+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "dd656878-d76a-4b83-8dbc-ca30dd359c60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71847", "type": "seen", "source": "https://gist.github.com/alon710/ad9de868f19ed1752a611a888e617195", "content": "# CVE-2026-71847: CVE-2026-71847: Use-After-Free in Ruby JSON Gem ResumableParser\n\n> **CVSS Score:** 8.7\n> **Published:** 2026-08-07\n> **Full Report:** https://cvereports.com/reports/CVE-2026-71847\n\n## Summary\nA technical analysis of the use-after-free (UAF) vulnerability in the Ruby JSON gem (CVE-2026-71847) that impacts versions 2.20.0 through 2.21.1. This vulnerability occurs when parsing incomplete stream data containing duplicate keys.\n\n## TL;DR\nA Use-After-Free (UAF) bug in the native C extension of the Ruby json gem allows remote attackers to trigger a process crash and denial of service via malformed streaming JSON data with duplicate keys.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-416 (Use After Free)\n- **Attack Vector**: Network\n- **CVSS v4.0**: 8.7 (High)\n- **Exploit Status**: PoC (Proof of Concept)\n- **Impact**: Denial of Service (Process Crash)\n- **Affected Gem Versions**: >= 2.20.0, < 2.21.2\n\n## Affected Systems\n\n- Ruby applications utilizing the JSON::ResumableParser class in json gem versions 2.20.0 to 2.21.1.\n- **json (gem)**: >= 2.20.0, < 2.21.2 (Fixed in: `2.21.2`)\n\n## Mitigation\n\n- Upgrade the 'json' gem to version 2.21.2 or newer.\n- Filter incoming stream payloads for duplicate object keys before passing to the parser.\n- Implement automatic process restarts for worker nodes.\n\n**Remediation Steps:**\n1. Update the Gemfile dependency: gem 'json', '>= 2.21.2'\n2. Run 'bundle update json' to update the lockfile.\n3. Deploy the updated code to production environments.\n4. Verify the version with 'bundle info json'.\n\n## References\n\n- [GitHub Security Advisory GHSA-9hj4-r449-hfvc](https://github.com/ruby/json/security/advisories/GHSA-9hj4-r449-hfvc)\n- [CVE-2026-71847 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-71847)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-71847) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-08T01:33:52.623224Z"} 2026-08-08T01:33:52.623224+00:00 https://vulnerability.circl.lu/sighting/d0b8a001-f946-4519-ad69-15a5e1ca56a2/export 2026-08-09T19:52:55.726000+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "d0b8a001-f946-4519-ad69-15a5e1ca56a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-71847", "type": "published-proof-of-concept", "source": "https://github.com/ruby/json/security/advisories/GHSA-9hj4-r449-hfvc", "content": "", "creation_timestamp": "2026-08-07T20:35:09.126281Z"} 2026-08-07T20:35:09.126281+00:00 https://vulnerability.circl.lu/sighting/844fea00-c91b-4186-91ea-9b8f34c48b8f/export 2026-08-09T19:52:55.727253+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "844fea00-c91b-4186-91ea-9b8f34c48b8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71847", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/7igh6tff3f5ib", "content": "CVE-2026-71847 - Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buffer and crashes on truncated duplicate-key streams\nCVE ID : CVE-2026-71847\n \n Published : Aug. 7, 2026, 7:18 p.m. | 36\u00a0minutes ago\n \n Description : Ruby JSON is a JSON implementation ...", "creation_timestamp": "2026-08-07T20:07:36.814034Z"} 2026-08-07T20:07:36.814034+00:00