How many ruby json CVEs are in CISA KEV?

None of ruby json's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for ruby json vulnerabilities?

Yes — 3 of ruby json's CVEs have a known public exploit.

Which versions of ruby json are affected?

119 distinct ruby json versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in ruby json CVEs?

ruby json's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-122 (Heap-based Buffer Overflow), CWE-125 (Out-of-bounds Read), CWE-134 (Use of Externally-Controlled Format String).

How many critical ruby json vulnerabilities are there?

ruby json has 1 critical and 3 high-severity CVEs.

What is the average severity of ruby json CVEs?

The average CVSS base score across ruby json's scored CVEs is 7.6.

ruby json Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: ruby json vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

ruby json Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

ruby json has 5 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

Severity and exploitation

How the CVSS severity of ruby json's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High3

Medium0

Low1

In CISA’s Known Exploited Vulnerabilities catalog

None of ruby json's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3 of ruby json's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every ruby json version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

2.10.02 CVEs
2.10.12 CVEs
2.14.02 CVEs
2.14.12 CVEs
2.15.02 CVEs
2.15.12 CVEs
2.15.22 CVEs
2.16.02 CVEs
2.17.02 CVEs
2.17.12 CVEs
2.18.02 CVEs
2.18.12 CVEs

Common weakness types

The CWE weakness categories most often found in ruby json CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many ruby json CVEs were published each year.

2017

2025

2026

Other ruby products

Browse vulnerabilities for other products by ruby.

ruby42 CVEs rubygems15 CVEs net-imap10 CVEs rexml9 CVEs webrick8 CVEs cgi5 CVEs uri4 CVEs openssl3 CVEs

All ruby vulnerabilities

Frequently asked questions

Common questions about ruby json vulnerabilities.

How many CVEs does ruby json have?: ruby json has 5 published CVE records since 2017.
How many ruby json CVEs are in CISA KEV?: None of ruby json's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for ruby json vulnerabilities?: Yes — 3 of ruby json's CVEs have a known public exploit.
Which versions of ruby json are affected?: 119 distinct ruby json versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in ruby json CVEs?: ruby json's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-122 (Heap-based Buffer Overflow), CWE-125 (Out-of-bounds Read), CWE-134 (Use of Externally-Controlled Format String).
How many critical ruby json vulnerabilities are there?: ruby json has 1 critical and 3 high-severity CVEs.
What is the average severity of ruby json CVEs?: The average CVSS base score across ruby json's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track ruby json vulnerabilities

Get an alert for each new ruby json CVE, with AI-written analysis and remediation steps.

Create an account See pricing

ruby json Vulnerabilities