Articles about Ruby JSON Format String Injection CVE-2026-33210 (31.3.2026)

3 views
Skip to first unread message

Eyal Estrin

unread,
Mar 31, 2026, 1:04:39 AM (yesterday) Mar 31
to
Ruby JSON has a format string injection vulnerability
https://github.com/advisories/GHSA-3m6g-2423-7cp3

CVE-2026-33210: Ruby JSON has a format string injection vulnerability
https://www.miggo.io/vulnerability-database/cve/CVE-2026-33210

Use of Externally-Controlled Format String
https://security.snyk.io/vuln/SNYK-RUBY-JSON-15692503




Eyal Estrin
Author | Cloud Architect | AWS • Azure • GCP Insights
Social: @eyalestrin
Connect: https://linktr.ee/eyalestrin Blog: https://security-24-7.com
Reply all
Reply to author
Forward
0 new messages