Yajl-ruby Project Yajl-ruby — known CVE vulnerabilities

Every CVE whose affected-product data names Yajl-ruby Project Yajl-ruby, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2017-16516 — CVSS 7.5 (high): In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a…
• CVE-2022-24795 — CVSS 5.9 (medium): yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of `yajl` contain an integer…