AIKIDO-2026-11155
oj is vulnerable to Out-of-bounds Read
59
Medium Risk
This Affects:
ojTL;DR
The C extension intern.c path interned symbol names from the wrong buffer pointer when JSON keys exceeded the inline buffer size. This can read unintended memory when parsing JSON that triggers that code path. The release also bounds Oj::Doc child-iterator depth to block stack exhaustion during deeply nested traversal. The patch uses the correct allocated buffer and enforces iterator depth limits.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
oj is vulnerable to Out-of-bounds Read in versions 0.0.1 - 3.17.2.
How to fix this
Upgrade the oj library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant