Filtered by vendor Ox Project
Subscriptions
Filtered by product Ox
Subscriptions
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2017-15928 | 1 Ox Project | 1 Ox | 2025-04-20 | N/A |
In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parse_obj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication. | ||||
CVE-2017-16229 | 1 Ox Project | 1 Ox | 2024-11-21 | N/A |
In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the read_from_str function in sax_buf.c when a crafted input is supplied to sax_parse. |
Page 1 of 1.