Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
ruby/json
master @ 168095c
3
Fixes
1
CVEs
CRITICAL
Peak severity
66.7%
Coverage
Highlights
Integer Overflow: 2 prior fixes. Scrutinize any change in this area.
ext/json/ext/parser/parser.c: most-fixed (2 issues). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Format String Vulnerability: User-controlled duplicate JSON keys can contain format specifiers that are unsafely processed by rb_sprintf during error generation, leading to format string injection. This is associated with CVE-2026-33210.
Integer Overflow: Buffer capacity and length tracking used 32-bit unsigned long integers on some platforms, allowing integer overflows during memory allocation and copying via MEMCPY.
Integer Overflow: Invalid unicode escape sequences could bypass parser validation on platforms where characters are unsigned by default, requiring explicit sign casting before evaluation.